NetApp
Vserver : Storage > LUNs : Understanding LUNs : How to limit LUN access in a virtualized environment
How to limit LUN access in a virtualized environment
You can limit access to your LUNs through igroups and port sets. Until you map LUNs to an igroup, you cannot access to your LUNs. You use port sets to limit which LIFs an initiator can access.
A port set is a collection of LIFs. If you do not bind those igroups to a port set, any initiator within an igroup can access any mapped LUN through any LIF.
The way an initiator connects to a LUN is through an igroup. In the following example, initiator1 can access LUN1 through LIF1 and LIF2. Without a port set, initiator1 can access LUN1 over any LIF.
You can limit access to a LUN by binding igroups to port sets. In the following example, initiator1 can access LUN1 through LIF1. However, initiator1 cannot access LUN1 through LIF2 because LIF2 is not in portset1.

Was this topic helpful? Send comments to NetApp.