Monday, October 11, 2010

Cisco MDS 9134

Advanced Traffic Management for High-Performance, Resilient SANs
Advanced traffic management capabilities integrated into the Cisco MDS 9134 simplify deployment and optimization of core-edge fabrics.
• Virtual output queuing helps ensure line-rate performance on each port, independent of traffic pattern, by eliminating head-of-line blocking.
• For 4-Gbps ports, each port group consisting of 4 ports has a pool of 64 buffer credits, with a default of 16 buffer credits per port. When extended distances are required, up to 64 buffer credits can be allocated to a single port within the port group. This extensibility is available without additional licensing. Each of the 10-Gbps ports has 64 buffer credits.
• PortChannels allow users to aggregate up to 16 physical ISLs into a single logical bundle, providing optimized bandwidth use across all links. The bundle can consist of any port from the switch, helping ensure that the bundle remains active even in the event of a port failure.
• Fabric Shortest Path First (FSPF)-based multipathing provides the intelligence to load balance across up to 16 equal-cost paths and, in the event of a switch failure, dynamically reroute traffic.
• QoS can be used to manage bandwidth and control latency, to prioritize critical traffic.
• Comprehensive port and flow statistics facilitate sophisticated performance analysis and service-level agreement (SLA) accounting.
Advanced Diagnostics and Troubleshooting Tools
Management of storage networks requires proactive diagnostics, tools to verify connectivity and route latency, and mechanisms for capturing and analyzing traffic. The Cisco MDS 9134 integrates the industry's most advanced analysis and debugging tools. Power-on self-test (POST) and online diagnostics provide proactive health monitoring. The Cisco MDS 9134 provides the integrated hardware functions required to implement diagnostic capabilities such as Fibre Channel Traceroute to detail the exact path and timing of flows, and SPAN to intelligently capture network traffic. After traffic has been captured, it can be analyzed with the Cisco Fabric Analyzer, an embedded Fibre Channel analyzer. With the Cisco MDS 9134, Cisco delivers a comprehensive toolset for troubleshooting and analysis of an organization's storage network.
Comprehensive Security
In recognition of the need for unassailable security in storage networks, the Cisco MDS 9134 offers an extensive security framework to protect highly sensitive data crossing today's enterprise networks.
• VSANs are used to achieve higher security and greater stability by providing complete isolation among devices that are connected to the same physical SAN.
• Intelligent packet inspection at the port level, including the use of access control lists (ACLs) for hardware enforcement of zones, VSANs, and advanced port security features are provided.
• Extended zoning capabilities help ensure that broadcasts are restricted to the selected zones (the broadcast zones).
• FC-SP provides switch-to-switch and host-to-switch Diffie-Hellman Challenge Handshake Authentication Protocol (DH-CHAP) authentication supporting RADIUS or TACACS+, to help ensure that only authorized devices access protected storage networks.
• These features, in conjunction with management access and control plane security, makes the Cisco MDS 9000 family among the most secure platforms in its class.
High-Availability Platform for Mission-Critical Environments
The Cisco MDS 9134 is designed for mission-critical availability. Nondisruptive software upgrades; hot-swappable, redundant fans and power supplies; and the unique capability to automatically restart failed processes combine to define a new standard for fabric switch availability.
High availability is implemented at the fabric level through the industry's most robust and highest-performance ISLs. PortChannel capability allows users to aggregate up to 16 physical ports into one logical bundle. The bundle can sustain the failure of any physical link without causing a reset. Additionally, FSPF multipathing provides the intelligence to load balance across up to 16 equal-cost paths and, if a switch fails, to dynamically reroute traffic. The Cisco MDS 9134 offers outstanding fabric switch availability, minimizing TCO.
Simplified Management
The Cisco MDS 9134 provides four principal modes of management: the Cisco MDS 9000 family CLI, the Quick Configuration Wizard, the Cisco Fabric Manager, and integration with third-party storage management tools.
• Consistent, logical CLI: Adhering to the syntax of the widely known Cisco IOS® Software CLI, the Cisco MDS 9000 family CLI is easy to learn and delivers broad management capabilities. The Cisco MDS 9000 family CLI is an extremely efficient and direct interface designed to provide optimal capabilities to administrators in enterprise environments.
• Quick Configuration Wizard: The Quick Configuration Wizard helps eliminate management complexity and creates a readily available SAN environment for small- and midsized-business applications. The wizard allows server access to storage to be set up quickly and easily in a single step, using an intuitive GUI.
• Cisco Fabric Manager: Cisco Fabric Manager is included with the Cisco MDS 9134 for integrated, comprehensive management of larger SAN environments. Cisco Fabric Manager is a responsive, easy-to-use Java application that allows administrators to perform vital tasks such as topology discovery, fabric configuration and verification, provisioning, monitoring, and fault resolution.
• The Cisco MDS 9134 provides an extensive API for integration with third-party and user-developed management tools. The APIs are based on industry-standard protocols, including SNMP and the Storage Networking Industry Association (SNIA) Storage Management Initiative Specification (SMI-S).

Cisco MDS 9134 Multilayer Fabric Switch

he Cisco MDS 9134 Multilayer Fabric Switch , designed for midrange to large enterprise customers, provides line-rate 4-Gbps and 10-Gbps ports based on a purpose-built "switch-on-a-chip" application-specific integrated circuit (ASIC) with high performance, high density, and enterprise-class availability. The switch offers outstanding value by providing flexibility, high-availability, security, and ease of use at an affordable price in a compact one-rack-unit (1RU) form factor. With the flexibility to expand from 24 to 32 ports in 8-port increments and optionally activate 2 10-Gbps ports, the Cisco MDS 9134 offers the densities required for top-of-the-rack switch and edge connectivity in enterprise SANs. The Cisco MDS 9134 offers non-blocking architecture, with all 32 4-Gbps ports and the 2 10-Gbps ports operating at line rate concurrently.
The 10-Gbps ports support a range of optics for connection to the Cisco MDS 9000 family core using 10-Gbps Inter-Switch Link (ISL) connectivity. The Cisco MDS 9134 can also be stacked using copper CX4 X2 transceivers to cost effectively offer up to 64-port densities. The Cisco MDS 9134 supports quick configuration and task wizards that allow it to be deployed quickly and easily in networks of any size. Powered by Cisco MDS 9000 NX-OS/SAN-OS Software, it includes advanced storage networking features and functions and is compatible with Cisco MDS 9500 Series Multilayer Directors and Cisco MDS 9200 Series Multilayer Fabric Switches, providing transparent, end-to-end service delivery in core-edge deployments.
Figure 1. Cisco MDS 9134 Multilayer Fabric Switch
Highlights
• Exceptional flexibility and scalability: The Cisco MDS 9134 offers up to 32 autosensing Fibre Channel ports capable of speeds of 4, 2, and 1 Gbps and 2 10-Gbps ports in a compact 1RU form-factor chassis with 4 Gbps of dedicated bandwidth for each port and an aggregate platform bandwidth of 352 Gbps. The base configuration has 24 active ports with the flexibility to upgrade onsite to 32 ports in 8-port increments with Cisco MDS 9134 On-Demand Port Activation Licenses.
• High-performance connectivity: The 10-Gbps ports can be activated independently in 24- or 32-port configurations. The Cisco MDS 9134 is an ideal platform for a standalone departmental storage area network (SAN) switch, top-of-the-rack switch, and edge switch in enterprise core-edge SANs. Two Cisco MDS 9134 switches can be stacked together using copper CX4 X2 transceivers to form up to a 64-port switch.
• Intelligent storage networking services at an affordable price: The Cisco MDS 9134, powered by Cisco MDS 9000 NX-OS/SAN-OS Software, offers intelligent storage networking capabilities such as virtual SANs (VSANs), PortChannels, quality of service (QoS), and security for cost-effective design, deployment, and management of departmental and enterprise SANs.
• Highly available platform for mission-critical deployments: The Cisco MDS 9134 is designed for environments where downtime is unacceptable. It offers nondisruptive software upgrades, dual hot-swappable power supplies (with integrated fans for redundancy), hot-swappable fans, VSANs for fault isolation, and PortChannels for ISL resiliency.
• Comprehensive security framework: The Cisco MDS 9134 supports RADIUS and TACACS+, port security, fabric binding, Fibre Channel Security Protocol (FC-SP) host-to-switch and switch-to-switch authentication, Secure FTP (SFTP), Secure Shell Version 2 (SSHv2) and Simple Network Management Protocol Version 3 (SNMPv3) implementing Advanced Encryption Standard (AES), VSANs, hardware-enforced zoning, broadcast zones, and per-VSAN role-based access control (RBAC).
• Simplified storage management: The Cisco MDS 9134 includes built-in storage network management, with all features available through a command-line interface (CLI) or the Cisco Fabric Manager, a centralized management tool with task-based wizards that simplify management of a standalone switch or multiple switches and fabrics.
• IBM Fiber Connection (FICON) protocol integration: FICON Control Unit Port (CUP) management and switch cascading facilitate mainframe connectivity. VSANs allow hardware-based separation of Fibre Channel and FICON traffic switched on a single physical SAN, decreasing overall total cost of ownership (TCO) without compromising scalability, availability, manageability, or network security.
• Sophisticated diagnostics: Industry-leading intelligent diagnostics such as Fibre Channel Ping, Fibre Channel Traceroute, Switched Port Analyzer (SPAN), Cisco Fabric Analyzer, and integrated Call Home capability enhance reliability, facilitate faster problem resolution, and reduce service costs.
• Reduced TCO: Common platform architecture and the use of Cisco MDS 9000 NX-OS/SAN-OS Software intelligent storage networking services across all Cisco MDS 9000 family switches reduce ongoing operating expenses by providing a consistent set of provisioning, management, and diagnostic capabilities.
Figure 2. Cisco MDS 9134:Two Cisco MDS 9134 Switches Stacked Using 10GBASE Copper CX4
Key Features and Benefits
Exceptional Flexibility and Scalability
The Cisco MDS 9134 offers up to 32 auto-sensing Fibre Channel ports capable of speeds of 4, 2, and 1 Gbps plus 2 10-Gbps ports in a compact 1RU form-factor chassis. With 4 Gbps of dedicated bandwidth for each port, the Cisco MDS 9134 is designed to meet the performance and scalability requirements of the most demanding environments.
The flexibility of the Cisco MDS 9134 is provided by the Cisco MDS 9134 On-Demand Port Activation License, which allows the addition of 4- and 10-Gbps ports. Customers can start with a base configuration of 24 ports and can upgrade onsite to 32 ports and also optionally add the 10-Gbps ports using the appropriate licenses. With advanced storage networking capabilities built into the platform, it is an ideal choice both as a standalone departmental SAN switch and as an edge switch in enterprise core-edge SANs.
The Cisco MDS 9134 includes hot-swappable, Small Form-Factor Pluggable (SFP), LC interfaces. All SFP interfaces are 4, 2, and 1 Gbps, with autosensing capabilities. Individual ports can be configured with either short- or long-wavelength SFP optics for connectivity up to 860 meters (m) and 10 kilometers (km), respectively. The 10-Gbps ports support X2 form-factor optics, copper or optical.
VSANs for Segmentation and Isolation
VSAN, an industry standard for fabric virtualization capabilities, enables more efficient storage network use by creating hardware-based isolated environments within a single physical SAN fabric or switch. Up to 16 VSANs are supported per switch. Each VSAN can be zoned as a typical SAN and maintains its own fabric services and management domains for added scalability and resilience. VSANs allow the cost of SAN infrastructure to be shared among more users, while helping ensure segregation of traffic and retaining independent control of configuration on a VSAN-by-VSAN basis.
FICON Support
The Cisco MDS 9134 supports IBM zSeries FICON and Linux environments. Qualified by IBM for attachment to all FICON-enabled devices in an IBM zSeries operating environment, the switch supports transport of the FICON protocol in cascaded fabrics, as well as intermix of FICON and open systems Fibre Channel Protocol (FCP) on the same switch.
VSANs simplify intermix of SAN resources between z/OS, mainframe Linux, and open systems environments, enabling increased SAN utilization and simplified SAN management. VSAN-based intermix mode eliminates the uncertainty and instability often associated with zoning-based intermix techniques. VSANs also greatly reduce the probability that a misconfiguration or component failure in one VSAN will affect operation in other VSANs. 
VSAN-based management access control simplifies partitioning of SAN management responsibilities between mainframe and open systems environments, enhancing security. FICON VSANs can be managed using the integrated Cisco Fabric Manager; the Cisco CLI; or IBM CUP-enabled management tools, including IBM SA/390, Resource Measurement Facility (RMF), and Dynamic Channel Path Management (DCM).

16-Port Multilayer Fabric Switch

Scalable 16-Port Multilayer Fabric Switch
The Cisco MDS 9216A Multilayer Fabric Switch (Figure 1) brings new capability and investment protection to the fabric switch market. Sharing a consistent architecture with the Cisco DWDM-XFP-59.79= Series, the Cisco MDS 9216A combines multilayer intelligence with a modular chassis, making it an extremely capable and flexible fabric switch. Starting with 16 2-Gbps Fibre Channel ports, the expansion slot on the Cisco MDS 9216A allows for the addition of any current or future Cisco MDS 9000 Family module for up to 64 total ports.
Figure 1. Cisco MDS 9216A Multilayer Fabric Switch
KEYS FEATURES AND BENEFITS
The Cisco MDS 9216A Multilayer Fabric Switch is designed for building mission-critical enterprise storage area networks (SANs) where scalability, multilayer capability, resiliency, robust security, and ease of management are imperative. The Cisco MDS 9216A offers the following important features:
• Compelling economics-A modular design provides a 3-rack unit (RU) base system consisting of 16 2-Gbps Fibre Channel ports and can be expanded with a variety of optional switching modules to up to 64 total Fibre Channel ports.
• Cost-effective design-The Cisco MDS 9216A offers advanced management tools for overall lower total cost of ownership (TCO). It includes virtual SAN (VSAN) technology for hardware-enforced isolated environments within a single physical fabric for secure sharing of physical infrastructure, further decreasing TCO.
• Multiprotocol and multitransport-The multilayer architecture of the Cisco MDS 9216A helps enable a consistent feature set over a protocol-independent switch fabric and easily integrates Fibre Channel, IBM Fiber Connection (FICON), Small Computer System Interface over IP (iSCSI), and Fibre Channel over IP (FCIP) in one system.
• Integrated hardware-based VSANs and Inter-VSAN Routing (IVR)-Enables deployment of large-scale multisite and heterogeneous SAN topologies. Integration into port-level hardware allows any port within a system or fabric to be partitioned into any VSAN. Integrated hardware-based inter-VSAN routing provides line-rate routing between any ports within a system or fabric without the need for external routing appliances.
• High-performance inter-switch links (ISLs)-Supports up to 16 Fibre Channel links in a single PortChannel. Links can span any speed-matched ports on any module within a chassis for added scalability and resilience.
• Intelligent network services-Uses VSAN technology for hardware-enforced, isolated environments within a single physical fabric, access control lists (ACLs) for hardware-based intelligent frame processing, and advanced traffic management features such as Fibre Channel Congestion Control (FCC) and fabric-wide quality of service (QoS) to facilitate migration from SAN islands to enterprise-wide storage networks.
• Advanced FICON services-Supports FICON environments, including cascaded FICON fabrics, VSAN-enabled intermix of mainframe and open systems environments, and N_Port ID virtualization for mainframe Linux partitions. CUP (Control Unit Port) support enables in-band management of Cisco MDS 9200 Series switches from the mainframe management console.
• Comprehensive network security framework-Supports RADIUS and TACACS+, Fibre Channel Security Protocol (FC-SP), Secure File Transfer Protocol (SFTP), Secure Shell (SSH) Protocol, and Simple Network Management Protocol Version 3 (SNMPv3) implementing Advanced Encryption Standard (AES), VSANs, hardware-enforced zoning, ACLs, and per-VSAN role-based access control.
• Sophisticated diagnostics-Provides intelligent diagnostics, protocol decoding, and network analysis tools as well as integrated Call Home capability for added reliability, faster problem resolution, and reduced service costs.
• Open platform for intelligent storage applications-Provides the intelligent services necessary for hosting and/or accelerating storage applications such as network-hosted volume management, data migration and backup. Storage services modules can be installed in any Cisco MDS 9500 or MDS 9200 series chassis to provide application hosting and/or acceleration intelligence in the fabric.

Sunday, October 10, 2010

Cisco MDS 9513

Product Overview

The flagship of the Cisco MDS 9500 Series, the Cisco MDS 9513 Multilayer Director (Figure 1) elevates the standard for director-class switches. Providing industry-leading availability, scalability, security, and management, the Cisco MDS 9513 allows you to deploy high-performance SANs with an extremely low total cost of ownership (TCO). Layering a rich set of intelligent features onto a high-performance, protocol-independent switch fabric, the Cisco MDS 9513 addresses the stringent requirements of large data center storage environments: uncompromising high availability, security, scalability, ease of management, and transparent integration of new technologies for extremely flexible data center SAN solutions. Compatible with first-, second-, and third-generation Cisco MDS 9000 Family switching modules, the Cisco MDS 9513 provides advanced functions and outstanding investment protection, allowing the use of any Cisco MDS 9000 Family switching module in this highly scalable system.
Figure 1. Cisco MDS 9513 Multilayer Director
Features and Benefits
The Cisco MDS 9513 offers the following main features:
• Industry-leading scalability and availability: The Cisco MDS 9513 combines nondisruptive software upgrades, stateful process restart and failover, and full redundancy of all major components for best-in-class availability. Supporting up to 528 Fibre Channel ports in a single chassis, 1584 Fibre Channel ports in a single rack, and 2.2 Tbps of system bandwidth, the Cisco MDS 9513 leads the industry in scalability and is designed to meet the requirements of the largest data center storage environments.
• 1/2/4/8-Gbps and 10-Gbps Fibre Channel switching: The Cisco MDS 9513 supports new 8-Gbps as well as existing 10-Gbps, 4-Gbps, and 2-Gbps Cisco MDS 9000 Family Fibre Channel switching modules.
• Flexibility and investment protection: The Cisco MDS 9513 supports mix of first-, second-, and third-generation Cisco MDS 9000 Family switching modules, providing backward compatibility and unparalleled investment protection.
• TCO driven design: Offers advanced management tools for overall lowest TCO. It supports Cisco virtual SAN (VSAN) technology for hardware-enforced, isolated environments within a single physical fabric for secure sharing of physical infrastructure, further decreasing TCO.
• Multiprotocol architecture: The multilayer architecture of the Cisco MDS 9000 Family enables a consistent feature set over a protocol-independent switch fabric. The Cisco MDS 9513 transparently integrates Fibre Channel, IBM Fiber Connection (FICON), Small Computer System Interface over IP (iSCSI), and Fibre Channel over IP (FCIP) in one system.
• Intelligent network services: Provides integrated support for VSAN technology, access control lists (ACLs) for hardware-based intelligent frame processing, and advanced traffic management features such as Fibre Channel Congestion Control (FCC) and fabric-wide quality of service (QoS) to enable migration from SAN islands to enterprise-wide storage networks.
• Integrated Cisco Storage Media Encryption (SME) as distributed fabric service: Supported on the Cisco MDS 18/4-port Multiservice Module, encrypts data at rest on heterogeneous tape drives and virtual tape libraries (VTLs) in a SAN environment using secure IEEE standard Advanced Encryption Standard (AES) 256-bit algorithms. Cisco MDS 9000 18/4-Port Multiservice Module helps ensure ease of deployment, scalability, and high availability by using innovative technology to transparently offer Cisco SME capabilities to any device connected to the fabric without the need for reconfiguration or rewiring. Cisco SME provisioning is integrated into the Cisco Fabric Manager; no additional software is required. Cisco SME key management can be provided by either the Cisco Key Management Center (KMC) or with RSA Key Manager for the Datacenter from RSA, the security division of EMC.
• Open platform for intelligent storage applications: Provides the intelligent services necessary for hosting and/or accelerating storage applications such as network-hosted volume management, data migration and backup.
• Integrated hardware-based VSANs and Inter-VSAN Routing (IVR): Enables deployment of large-scale multisite and heterogeneous SAN topologies. Integration into port-level hardware allows any port within a system or fabric to be partitioned into any VSAN. Integrated hardware-based inter-VSAN routing provides line-rate routing between any ports within a system or fabric without the need for external routing appliances.
• Advanced FICON services: Supports 1/2/4-Gbps and 10-Gbps FICON environments, including cascaded FICON fabrics, VSAN-enabled intermix of mainframe and open systems environments, and N_Port ID virtualization for mainframe Linux partitions. CUP (Control Unit Port) support enables in-band management of Cisco MDS 9000 Family switches from the mainframe management console.
• Comprehensive security framework: Supports RADIUS and TACACS+, Fibre Channel Security Protocol (FC-SP), Secure File Transfer Protocol (SFTP), Secure Shell (SSH) Protocol, and Simple Network Management Protocol Version 3 (SNMPv3) implementing Advanced Encryption Standard (AES), VSANs, hardware-enforced zoning, ACLs, and per-VSAN role-based access control.
• Sophisticated diagnostics: Provides intelligent diagnostics, protocol decoding, network analysis tools as well as integrated call-home capability for added reliability, faster problem resolution, and reduced service costs.
• Unified SAN management: The Cisco MDS 9000 Family includes built-in storage network management with all features available through a command-line interface (CLI) or Cisco Fabric Manager, a centralized management tool that simplifies management of multiple switches and fabrics. Integration with third party storage management platforms allows seamless interaction with existing management tools.
• Cisco TrustSec Fibre Channel Link Encryption: Delivers transparent, hardware-based, line-rate encryption of Fibre Channel data between any Cisco MDS 9000 Family 8-Gbps modules.

Cisco MDS Data Mobility Manager

storage requirements more than doubling every year, storage administrators are challenged to streamline their operations. This streamlining includes the adoption and introduction of new array technologies and the movement of data to different tiers of storage so that storage resources are optimally deployed. The amount of data that needs to be moved is significant enough that data mobility ranks in the top five of most surveys of storage administrators' concerns.
Several solutions are available today that can help a storage administrator address the data migration task. The solutions can broadly be characterized into host-, storage-, and appliance-based approaches. Each of the existing approaches has its benefits and drawbacks.
A customer's preference for a particular solution depends on the weight that customer assigns to the solution's advantages and disadvantages. However, in some scenarios, the downside of the existing approaches outweigh the upsides. For these scenarios, Cisco MDS Data Mobility Manager (DMM) provides a solution.
Cisco MDS DMM is typically a beneficial solution in an organization in which the IT group is partitioned into systems and database administrators and storage administrators, and the storage administrators want complete control of the migration task to avoid dependency on systems or database administrators or storage vendor customer support engineers.
Commonly available data suggests that storage administrators who have to depend of systems or database administrators or storage vendor support engineers take four times the amount of time it should take to complete a migration task. Cisco MDS DMM allows a storage administrator or migration service provider to complete the migration with minimal coordination across the different teams (server, application, etc.) that support the different parts of a data center.
Figure 1 shows a typical deployment of Cisco MDS DMM in the storage area network (SAN) fabric.
Figure 1. Fabric-Based Cisco MDS Data Mobility Manager
Cisco MDS DMM offers these main features:
• Capability to migrate data from existing storage to new storage without any reconfiguration of the server, target device, or SAN: Neither the server nor the existing storage device sees the insertion of the Cisco DMM service. This transparent insertion of service is advantageous because it allows data migration to be completed with minimal coordination among the different job functions (such as systems and database administration) in a data center.
• Migration of multiple logical unit numbers (LUNs) at the same time: Although in theory, migration of several thousand LUNs at the same time is possible, in practice migration is likely to be limited to several hundred concurrent LUNs because of the effect of the administrative traffic on existing storage and the SAN.
• Migration to LUNs of larger sizes: Because migrations are triggered by capacity planning and the desire to move to new arrays that can offer larger-capacity LUNs, Cisco considered the capability to allow movement to larger LUNs extremely desirable when designing its solution.
• Secure erasure of disks being made obsolete: Data is usually migrated from an existing array to a new array because the existing array is being made obsolete or is being repurposed. In either case, secure erasure of data is desirable. Secure erasure requires certain patterns to be written to a disk using defined algorithms. Cisco MDS DMM enables the storage administrator to securely erase the data as part of the migration process.
• Verification of migrated data: The verification function available with Cisco MDS DMM allows the storage administrator to request a block-by-block comparison of the data in the existing storage array and the new storage array.
• Server- and storage-level migration: Data migration today is typically performed on a few servers at a time, to isolate any disruption to a small set of servers at a given time. Cisco MDS DMM offers two types of migration control: server level and storage level. With server-level migration, the storage administrator specifies all the initiators on a server and the respective target ports (on the storage array) that these initiators talk to (the administrator must provide the initiator and target pairs). The storage administrator can then schedule migration for all the LUNs visible to the server on the array.
This migration can be configured and the data movement completed without any additional configuration on the server, array, or SAN. With storage-level migration, the migration is performed using the identity of an initiator specific to Cisco (and so the server initiators do not play a role in the migration); storage-level migration requires that an initiator specific to Cisco be given access to all the LUNs that need to be migrated. The benefit of this approach is that fewer migration tasks need to be configured to complete the migration task.
• Rate control: Because administrative traffic from migration can affect the existing target device and the SAN, the rate of migration needs to be controlled. Cisco MDS DMM allows the administrator to assign a slow, medium, or fast setting to the migration task.
• Asynchronous migration: Typical migration implementations use a synchronous approach so that when a server sends an I/O operation to a region that was previously migrated, new write I/O operations are synchronously written to the existing and new storage arrays. This approach precludes the use of these tools when data needs to be migrated to accommodate data center consolidation because the existing and new storage arrays may be located thousands of miles apart. Cisco MDS DMM addresses limitations in existing migration solutions available on the market by offering an asynchronous capability.
• Configuration wizard: An easy-to-use configuration wizard built into the Cisco MDS 9000 family Fabric Manager steps users through the process needed to complete a migration task. The tool also reports the status of a migration and allows the user to monitor the migration progress. In addition to the configuration wizard, a command-line interface (CLI) is available to allow advanced users to create scripts to manage migration tasks.
The Cisco MDS DMM is available with Cisco MDS 9000 SAN-OS Software Version 3.3(1) on the Storage services module (SSM) module. Cisco MDS 9000 NX-OS Software Version 4.1x or higher is required to run DMM on Multi Service Module (MSM) 18/4 or MDS 9222i switch. A typical hardware configuration will employ two SSM module: or two MSM-18/4 or two MDS 9222i switch one per network in the typical redundant SAN configuration commonly deployed. A Cisco MDS DMM license is needed for each card. The only other requirement is that the existing and new storage arrays must be directly connected to Cisco MDS 9000 family switches. The Cisco MDS DMM Interoperability matrix documents the supported host operating system, multipath software, host bus adapter (HBA), and arrays for a given release.

Storage Media Encryption

Cisco Storage Media Encryption (SME) protects data at rest on heterogeneous tape drives and virtual tape libraries (VTLs) in a SAN environment using secure IEEE-standard Advanced Encryption Standard (AES) algorithms.
Cisco SME hardware and software are fully integrated with the Cisco MDS 9000 Family. Encryption is performed as a transparent Fibre Channel fabric service, which greatly simplifies deployment and management of sensitive data on SAN attached storage devices. Unlike competitive offerings, Cisco SME requires no downtime to deploy. Cisco SME is built on Federal Information Processing Standards (FIPS) system architecture and offers secure, comprehensive key management, with support for offline media recovery (Figure 1).
Figure 1. Cisco Storage Media Encryption
Features and Benefits
Cisco SME provides a complete, integrated solution for encryption of data at rest on heterogeneous tape drives and VTLs. Storage in any virtual SAN (VSAN) can make full use of Cisco SME, providing exceptional flexibility for provisioning this transparent fabric service. Cisco SME requires no SAN reconfiguration or rewiring, eliminating downtime for deployment.
Cisco SME employs clustering technology to enhance reliability and availability, enable automated load balancing and failover capabilities, and simplify provisioning. To simplify management, this encryption service is provisioned as a single, logical SAN fabric feature rather than as individual switches or modules.
Secure lifecycle key management is included, with essential features such as key archival, shredding, automatic key replication across data centers, high-availability deployments and export and import for single- and multiple-site environments. Cisco SME provisioning and key management are both integrated into Cisco Fabric Manager; no additional software is required for management.
The Cisco SME includes the following features:
• Rapid, scalable deployment: Cisco SME performance can easily be scaled up by adding more Cisco MDS 9000 Family switches or modules. The innovative Fibre Channel redirect capabilities in the Cisco MDS 9000 SAN-OS and NX-OS Software enable traffic from any switch port to be encrypted without SAN reconfiguration or rewiring.
• High availability: Cisco SME services employ clustering technology to create a highly available solution. The cryptographic cluster formed enhances reliability and availability, enables automated load-balancing and failover capabilities, and simplifies provisioning as a single SAN fabric service rather than as individual switches or modules. Additionally, Cisco Key Management Center (KMC) supports 1+1 high-availability deployments.
• Secure solution: Cisco SME uses strong, IEEE-compliant AES 256 encryption algorithms to protect data at rest. Advanced Cisco MDS 9000 SAN-OS and NX-OS Software security features, such as Secure Shell (SSH), SSL, RADIUS, and Fibre Channel Security Protocol (FC-SP) provide the foundation for a secure FIPS architecture.
• Comprehensive lifecycle key management: The Cisco KMC provides dedicated key management for Cisco SME, with support for single- and multiple-site deployments, including automatic key replication across data centers and high-availability deployments. Cisco KMC provides essential features such as key archival, secure export and import and translation for distribution, and key shredding. Enterprisewide lifecycle key management is also available using industry-leading software integrated through an open API included with Cisco SME.
• Integrated management: Cisco SME is configured and provisioned using the Cisco DWDM-X2-60.61= Family command-line interface (CLI) or Cisco Fabric Manager; no new management software is needed. In addition to consistent management interfaces, Cisco SME supports role-based access control (RBAC) and RADIUS and TACACS+ servers for unified credentials management.

Tuesday, September 21, 2010

Local Access versus Guest Access

If Windows ever notifies you active a asthenic sign, it probably means your link isn't as firm or as sure as it could be. Worse, you strength retrogress your form exclusively in any parts of your interior. If you're looking to amend the signal for your wireless textile, try any of these tips for extending your wireless compass and improving your wireless mesh execution.1. Opinion your wireless router (or wireless access component) in a primal positioning

When mathematical, spot your wireless router in a center locating in your lodging. If your wireless router is against an external paries of your home, the signalise leave be anemic on the separate broadside of your abode. Don't vexation if you can't suggest your wireless router, because there are more added slipway to turn your unification.2. Run the router off the story and gone from walls and metal objects (much as conductor record cabinets)

Mixture, walls, and floors will interact with your router's wireless signals. The reliever your router is to these obstructions, the many severe the trouble, and the weaker your form give be.3. Put your router's sensitiveness

The antennas supplied with your router are designed to be omni-directional, significant they broadcast in all directions around the router. If your router is moral an part stratum, half of the wireless signals testament be dispatched region your domicile, and some of your router's power present be lost. Most routers don't allow you to amount the force output, but you can gain punter use of the index. Upgrade to a hi-gain aerial that focuses the wireless signals only one route. You can aim the signal in the instruction you impoverishment it most.4. Position your machine's wireless textile device

Wireless mesh signals staleness be dispatched both to and from your computer. Sometimes, your router can broadcast strongly enough to push your machine, but your computer can't channelize signals support to your router. To turn this, set your laptop's PC card-based wireless textile musician with a USB fabric device that uses an foreign antenna. In fact, ponder the Hawking Hi-Gain Wireless USB web device, which adds an extraneous, hi-gain sensitiveness to your computer and can significantly change your chain.5. Add a wireless criminal

Wireless repeaters pay your wireless scheme capability without requiring you to add any wiring. Fair abode the wireless repeater halfway between your wireless attain sail and your machine, and you'll get an fast elevate to your wireless signal strength. Watch out the wireless repeaters from ViewSonic, D-Link, Linksys, and Metropolis Technology.6. Locomote your wireless head

Wireless routers can broadcast on individual several channels, corresponding to the way receiver devotion use other channels. In the One States and Canada, these channels are 1, 6, and 11. Fair like you'll sometimes pore trouble on one broadcasting post time added is utterly legible, sometimes one wireless transmission is clearer than others. Try changing your wireless router's passage finished your router's plan diplomatist to see if your signalise capableness improves. You don't necessary to exchange your computer's design, because it'll automatically observe the new canalize.
7. Reduce wireless interference

If you tally cordless phones or different wireless electronics in your location, your computer strength not be competent to "hear" your router over the sound from the opposite wireless devices. To soothe the noise, abstain wireless electronics that use the 2.4GHz oftenness. Instead, visage for cordless phones that use the 5.8GHz or 900MHz frequencies.
8. Update your code or your meshing device wood

Router manufacturers regularly kind clear improvements to their routers. Sometimes, these improvements increase show. To get the last firmware updates for your router, stay your router manufacturer's website.

Similarly, network device vendors occasionally update the software that Windows uses to pass with your network adapter, proverbial as the wood. These updates typically ameliorate execution and reliability. To get the wood updates, do the masses:
Windows 7 and Windows Vista

Sound Start docket, plosive All Programs, and then plosive Windows Update.

In the sinistral pane, utter Analyse for updates, and then wait while Windows Vista looks for the fashionable updates for your machine.

Pose any updates relating to your wireless fabric transcriber.

Windows XP Communicate Microsoft Update, occlusive Tariff, and then move time Windows XP looks for the current updates for your computer.  Pose any updates relating to your wireless transcriber.


9. Criticise equipment from a individual vendor

Time a Linksys router will product with a D-Link meshwork device, you oftentimes get turn action if you yield a router and web device from the identical vendor. Many vendors furnish a execution assistance of up to twice the show when you take their instrumentality: Linksys has the SpeedBooster study, and D-Link has the 108G enhancement.

10. Elevate 802.11b devices to 802.11g

802.11b is the most ordinary identify of wireless scheme, but 802.11g is almost squad present faster. 802.11g is backward-compatible with 802.11b, so you can plant use any 802.11b equipment that you know. If you're using 802.11b and you're lovesick with the performance, speculate exchange your router and mesh adapters with 802.11g-compatible equipment. If you're purchase new equipment, definitely prefer 802.11g.

Wireless networks never limit the speculative bandwidth limits. 802.11b networks typically get 2-5Mbps. 802.11g is unremarkably in the 13-23Mbps constitute. Belkin's Pre-N equipment has been sounded at 37-42Mbps.