Professional Documents
Culture Documents
Storage Manager For SANs Step-By-Step Guide
Storage Manager For SANs Step-By-Step Guide
Abstract
Storage Manager for SANs helps you create and manage logical unit numbers !"Ns# on Fibre Channel and $nternet SCS$ iSCS$# dis% dri&e subsystems that support 'irtual (is% Ser&ice '(S# in your storage area net)or% SAN#* +his guide pro&ides ser&er and storage subsystem re,uirements- an introduction to managing !"Ns- and step.by.step )al%throughs for creating and assigning !"Ns on both Fibre Channel and iSCS$ subsystems using Storage Manager for SANs*
Copyright Information
$nformation in this document- including "/! and other $nternet 0eb site references- is sub1ect to change )ithout notice* "nless other)ise noted- the companies- organi2ations- products- domain names- e.mail addresses- logos- people- places- and e&ents depicted in e3amples herein are fictitious* No association )ith any real company- organi2ation- product- domain name- e.mail address- logo- person- place- or e&ent is intended or should be inferred* Complying )ith all applicable copyright la)s is the responsibility of the user* 0ithout limiting the rights under copyright- no part of this document may be reproduced- stored in or introduced into a retrie&al system- or transmitted in any form or by any means electronic- mechanical- photocopyingrecording- or other)ise#- or for any purpose- )ithout the e3press )ritten permission of Microsoft Corporation* Microsoft may ha&e patents- patent applications- trademar%s- copyrights- or other intellectual property rights co&ering sub1ect matter in this document* 43cept as e3pressly pro&ided in any )ritten license agreement from Microsoft- the furnishing of this document does not gi&e you any license to these patents- trademar%s- copyrights- or other intellectual property* 5 2008 Microsoft Corporation* All rights reser&ed* Acti&e (irectory- Microsoft- MS.(6S- 'isual 7asic- 'isual Studio- 0indo)s- 0indo)s N+0indo)s Ser&er- and 0indo)s 'ista are trademar%s of the Microsoft group of companies* All other trademar%s are property of their respecti&e o)ners*
Contents
Storage Manager for SANs Step.by.Step 8uide*****************************************************************************9 Copyright $nformation********************************************************************************************************************** 2 Contents****************************************************************************************************************************************** : $ntroduction to Storage Manager for SANs*************************************************************************************; 6&er&ie) of !"N Management in Storage Manager for SANs*******************************************************; Managing !"Ns in a Fibre Channel en&ironment************************************************************************; Managing !"Ns in an iSCS$ en&ironment***********************************************************************************; "sing Storage Manager for SANs*************************************************************************************************** < /e,uirements for Storage Manager for SANs*****************************************************************************< 6pening Storage Manager for SANs******************************************************************************************* = Managing Storage on a /emote Computer*********************************************************************************8 Support for Multipath $>6***************************************************************************************************************** ? (eploying !"Ns "sing Storage Manager for SANs************************************************************************? +as% 9: Configure Ser&er Connections******************************************************************************************99 +as% 2: iSCS$ 6nly# Configure +argets and 4nable Portals*********************************************************92 +as% :: iSCS$ 6nly# Configure Security***************************************************************************************9: +as% @: iSCS$ 6nly# 4stablish !ogon Sessions 7et)een the $nitiator and +argets***********************9; +as% ;: Create a !"N******************************************************************************************************************** 9< Monitoring the status of !"N creation**************************************************************************************** 98 Pro&iding !"N Access to a Ser&er Cluster************************************************************************************9?
+argets are created in order to manage the connections bet)een an iSCS$ de&ice and the ser&ers that need to access it* A target defines the portals $P addresses# that can be used to connect to the iSCS$ de&ice- as )ell as the security settings if any# that the iSCS$ de&ice re,uires in order to authenticate the ser&ers re,uesting access to its resources* Note $n most cases- you can create and manage targets yourself* Bo)e&er- some iSCS$ storage subsystems only support simple target configurations- )here targets are automatically managed by the subsystem* 0ith simple target configurations- you also cannot delete a target or manually assign !"Ns to it* !"Ns are automatically assigned )hen they are created* For this type of subsystem- you 1ust need to identify the ser&er or cluster that )ill access the !"N- and the iSCS$ subsystem )ill enable access from that ser&er or cluster to the !"N* +o connect to a target- a ser&er in the SAN uses an iSCS$ initiator* An iSCS$ initiator is a logical entity that enables the ser&er to communicate )ith the target* +he iSCS$ initiator first logs on to the target* After access is granted by the target- the ser&er can start reading and )riting to all !"Ns assigned to that target* 4ach iSCS$ initiator can ha&e one or more net)or% adapters through )hich communication is established* As )ith Fibre Channel en&ironments- you only need to identify the ser&er or cluster that )ill access the !"N* Storage Manager for SANs automatically disco&ers the iSCS$ initiators on that ser&er or cluster- and lists all the a&ailable adapters in those initiators* After the iSCS$ adapters ha&e been disco&ered- you can select )hich adapters )ill be used for !"N traffic* For more information about iSCS$- see http:>>go*microsoft*com>f)lin%>C!in%$dD9022??*
<
+he storage subsystems that you )ant to administer using Storage Manager for SANs must support 'irtual (is% Ser&ice '(S#* For more information about '(S- see http:>>go*microsoft*com>f)lin%>Clin%idD?:;@<* +he '(S hard)are pro&ider for each storage subsystem must be installed on the ser&er* +he storage subsystems must be directly attached to your ser&er or must be accessible o&er the net)or%* +o use Storage Manager for SANs )ith an $nternet SCS$ iSCS$# subsystem- an iSCS$ soft)are initiator such as Microsoft iSCS$ $nitiator must be installed on the ser&er* iSCS$ $nitiator is a&ailable in Administrati&e +ools in 0indo)s Ser&er 2008* For more information about iSCS$- see http:>>go*microsoft*com>f)lin%>C!in%$dD9022??*
Subsystems 'ie) detailed information about the storage subsystems in your SAN that ha&e been disco&ered by '(S* +rives 'ie) detailed information about the dis% dri&es in the storage subsystems that ha&e been disco&ered in your SAN* Ma%e a dri&e light blin%* /ename a subsystem*
+ep"oying L Ns SANs
+his section )al%s you through the tas%s in&ol&ed in using Storage Manager for SANs to deploy logical unit numbers !"Ns# on both Fibre Channel and $nternet SCS$ iSCS$# subsystems* Figure 9 sho)s the process for deploying !"Ns on both types of subsystems*
$f the !"Ns )ill be deployed on a Fibre Channel subsystem- you only need to identify the ser&ers that )ill access the !"Ns- select )hich host bus adapter B7A# ports on those ser&ers )ill be used for !"N traffic- and finally create and assign !"Ns directly to the ser&ers* $f the !"Ns )ill be deployed on an iSCS$ subsystem- the process re,uires additional steps* After identifying the ser&ers that )ill access the !"Ns and selecting the iSCS$ initiator adapters that )ill be used for !"N traffic- you should do the follo)ing: 9* Create and configure targets on the iSCS$ subsystems and enable portals on those targets to handle !"N $>6 traffic* 2* 6ptionally configure iSCS$ security* :* 4stablish logon sessions from the iSCS$ initiator on each ser&er to one or more targets* @* Finally- create !"Ns and assign them to the targets* 7efore you create a !"N on either type of storage subsystem- &erify the follo)ing: +he storage subsystem is listed at the Subsystems node* +here is storage space a&ailable on the storage subsystem- and the !"N type you )ant to create is supported by the subsystem* $f you )ant to assign the !"N to a cluster- the cluster has been fully configured by installing Failo&er Clustering* Caution +o pre&ent data loss- ma%e sure that each ser&er is a member of only one cluster and that Failo&er Clustering has been installed on each ser&er in the cluster* For more information about installing Failo&er Clustering- see http:>>go*microsoft*com>f)lin%>C !in%$dD8<9<8* $f the ser&er you )ill be assigning the !"N to )ill access the !"N through more than one Fibre Channel port or iSCS$ initiator- Multipath $>6 has been installed and is running on that ser&er*
90
Caution (ata loss can occur if you assign the !"N to a ser&er that does not ha&e Multipath $>6 installed and )ill access the !"N through more than one Fibre Channel port or iSCS$ initiator* For more information- see Support for Multipath $>6* In this section# +as% 9: Configure Ser&er Connections +as% 2: iSCS$ 6nly# Configure +argets and 4nable Portals +as% :: iSCS$ 6nly# Configure Security +as% @: iSCS$ 6nly# 4stablish !ogon Sessions 7et)een the $nitiator and +argets +as% ;: Create a !"N
Add and enter the 00N of the ne) port* 6ptionally- type a description for the ne) port* c* +o enable a port- select its chec% bo3 in the 1nab"e column* Caution $f you enable more than one Fibre Channel port and the ser&er is not configured to use Multipath $>6- data corruption can occur* For more information about Multipath $>6- see Support for Multipath $>6 earlier in this guide* d* After selecting all ports that you )ant to enable- clic% O.* Note $f you create !"Ns only on a Fibre Channel subsystem- no additional configuration is needed before creating !"Ns* Aou can s%ip to +as% ;: Create a !"N later in this guide* ;* +o configure the iSCS$ initiator adapters on a ser&er: a* $n the Manage Server Connections dialog bo3- select a ser&er from the ser&er list* +he iSCSI Initiator Adapters tab lists all the initiator adapters that are a&ailable on the selected ser&er* b* +o enable an initiator adapter- select its chec% bo3 in the 1nab"e column* Caution $f you enable more than one iSCS$ initiator adapter and the ser&er is not configured to use Multipath $>6- data corruption can occur* For more information about Multipath $>6- see Support for Multipath $>6 earlier in this guide* c* After selecting all initiator adapters that you )ant to enable- clic% O.*
92
Note $n most cases- you can create and manage targets yourself* Bo)e&er- some iSCS$ storage subsystems only support simple target configurations- )here targets are automatically created )hen you create a !"N* 0ith simple target configurations- you also cannot delete a target or manually assign !"Ns to it* !"Ns are automatically assigned )hen they are created* For this type of subsystem- you 1ust need to identify the ser&er or cluster that )ill access the !"N- and the iSCS$ subsystem )ill enable access from that ser&er or cluster to the !"N* (o configure a target on an iSCSI storage subsystem 9* $n the console tree- clic% L N Management2* $n the Actions pane- clic% Manage iSCSI (argets* :* $n the Manage iSCSI (argets dialog bo3- in Se"ect a subsystem to manage- select the iSCS$ storage subsystem you )ant to configure a target for- and then clic% Add* @* $n the Add (arget dialog bo3- in (arget !riend"y Name- type a descripti&e name for the target that )ill help you to distinguish it from other targets* A separate iSCS$ name )ill be automatically assigned* ;* $n Se"ect porta"s to enab"e for this target- select the chec% bo3 ne3t to each $P address that the target should use- and then clic% O.* +he Manage iSCSI (argets dialog bo3 sho)s the ne) target- )ith the portals that you enabled listed at the bottom* <* $f you )ant to configure more targets- go bac% to step :* =* 0hen you are finished configuring targets- clic% C"ose*
I)sec* 0ith this le&el of security- all $P pac%ets sent during data transfers are encrypted and authenticated* A common %ey is set on all $P portals- allo)ing all peers to authenticate each other and negotiate pac%et encryption* For more information about $Psec- see http:>>go*microsoft*com>f)lin%>Clin%idD?:;20* Caution At a minimum- use one.)ay CBAP authentication bet)een iSCS$ initiators and targets* Note +he le&el of security that you can set for a storage subsystem depends on the hard)are manufacturer* Not all subsystems support all le&els of iSCS$ security* Aou should contact your hard)are manufacturer to &erify )hat le&el of security is supported* For more information about iSCS$- see http:>>go*microsoft*com>f)lin%>C!in%$dD9022??* (o configure iSCSI security 9* $n the console tree- clic% L N Management* 2* $n the Actions pane- clic% Manage iSCSI Security* :* +o configure one.)ay CBAP authentication- in the Manage iSCSI Security dialog bo3- configure the follo)ing settings on the (argets tab: a* $f you )ant to configure different CBAP secrets for different targets- in the list of targets- select a target that you )ant to set the CBAP secret for- and clic% Set Secret* .6r. +o use the same CBAP secret for a group of targets- select the targets from the list and clic% Set Secret* b* $n the Set Secret dialog bo3- type and confirm the target CBAP secret* c* 6ptionally- select $emember secret on "oca" initiator if you )ant to automatically pass the ne) secret to the local initiator* d* +o set the ne) secret- clic% O.* @* +o configure mutual CBAP authentication- you must first configure one.)ay CBAP authentication by follo)ing step :* +hen- enter the follo)ing configuration on the Loca" Initiator tab: a* +ype and confirm the CBAP secret for the local initiator* b* "nder mutual CBAP authentication- the initiator )ill only be able to log on to targets that share the initiator secret* +o share the initiator secret )ith the targets that the ser&er needs to access- in the list of targets- select each target that you )ant to authenticate on the initiator* c* +o set the ne) secret for the local initiator and to share it )ith the selected targets- clic% App"y Secret* ;* +o configure $Psec- in the Manage iSCSI Security dialog bo3- configure the follo)ing settings on the )orta"s tab: 9@
a* $f you )ant to use different $Psec %eys for different portals- in the list of portalsselect a portal and clic% Set I)sec .ey* .6r. +o use the same $Psec %ey for a group of portals- select the portals from the list- and clic% Set I)sec .ey* b* $n the Set I)sec .ey dialog bo3- type and confirm a ne) $Psec %ey* c* 6ptionally- select $emember the I)sec *ey on "oca" initiator if you )ant to automatically pass the ne) %ey to the local initiator* d* +o set the ne) $Psec %ey- clic% O.* <* 0hen you are done configuring iSCS$ security- clic% C"ose*
(as* 7# 3iSCSI On"y4 1stab"ish Logon Sessions -etween the Initiator and (argets
For a ser&er to access logical unit numbers !"Ns# that are assigned to a target on an $nternet SCS$ iSCS$# subsystem- the ser&er initiator must first establish a session )ith the target through an iSCS$ logon process* Aou can log on to iSCS$ targets using Storage Manager for SANs* +his starts a logon session only bet)een the ser&er that is running Storage Manager for SANs and the selected target* 4ach ser&er that re,uires access to the !"Ns that are assigned to a target must start a separate logon session )ith that target* Note $f you ha&e not yet configured iSCS$ security for initiators and targets- you )ill not be able to log on to a target* For more information about iSCS$ security- see +as% :: iSCS$ 6nly# Configure Security* Note Aou can also start a logon session bet)een a ser&er in your storage area net)or% SAN# and a target- using the local iSCS$ initiator user interface- if a&ailable this depends on the iSCS$ initiator soft)are that is installed on that ser&er#* 0hen you log on to a target- you can select the type of Challenge Bandsha%e Authentication Protocol CBAP# authentication to use during the session* $f you ha&e set an $Psec %ey for the portals- data encryption is automatic* (o estab"ish "ogon sessions between the initiator and iSCSI targets 9* $n the console tree- clic% L N Management* 2* $n the Actions pane- clic% Log On to iSCSI (argets* :* $n the Log On to iSCSI (argets dialog bo3- select the target that you )ant to 9;
establish a logon session )ith- and clic% Log On* Note $f the target that you )ant to log on to is not listed- clic% C"ose* +hen- in the Actions pane- clic% $efresh- and )hen the refresh has completed- start o&er from step 2* @* $n the Log On to (arget dialog bo3- select the type of CBAP authentication to use for the logon session: Log on using one-way C6A) authentication Log on using mutua" C6A) authentication
(as* 8# Create a L N
After you complete tas%s 9 through @- you can use the Pro&ision Storage 0i2ard to create a logical unit number !"N# on a Fibre Channel or $nternet SCS$ iSCS$# storage subsystem* 0ith the )i2ard you can optionally assign the !"N to your ser&er or another ser&er or cluster- create a &olume on the !"N- and format the &olume* $f you create a !"N but do not use the )i2ard to create a &olume on it immediately- you can use (is% Management to create the &olume later* $n this case the dis% associated )ith that !"N )ill be &isible to any ser&er or cluster that you assign it to- but it )ill be offline* 7efore you can create a partition or &olume on that dis%- you must use +is*)art or (is% Management to bring the dis% online* For more information about ho) to bring a dis% online- see: (is% Management http:>>go*microsoft*com>f)lin%>C!in%$(D?:;@@# On"ine command in +is*)art http:>>go*microsoft*com>f)lin%>C!in%$dD?:@;9#
(o create a L N 9* $n the console tree- clic% L N Management* 2* $n the Actions pane- clic% Create L N* :* Follo) the steps in the )rovision Storage &i'ard- pro&iding the information described in +able 9* +he follo)ing table contains some general recommendations and information about each one of the pages in the Pro&ision Storage 0i2ard: (ab"e 0 Comp"eting the )rovision Storage &i'ard
&i'ard )age +etai"s
'erify that storage is a&ailable on the subsystem andif you )ant to use the )i2ard to assign the !"N to a 9<
&i'ard )age
+etai"s
ser&er- the storage area net)or% SAN# ser&er connections ha&e been configured* Storage Subsystem and (ype Select the subsystem on )hich to create the !"N* +he list of subsystems specifies the total capacity of each a&ailable subsystem- the type of subsystem Fibre Channel or iSCS$#- and the percentage of free space* L N (ype Specify the !"N type to create: +he list of !"N types includes each !"N type that is a&ailable on the selected subsystem and specifies the ma3imum.si2e !"N for each type* Fault tolerant !"N types re,uire more dis% space than simple !"Ns* +herefore- the ma3imum si2e of the !"N is smaller than for a simple !"N* L N Name and Si'e +ype a name for the ne) !"N and specify the si2e of the !"N: +he !"N name can ha&e as many as <: characters* (epending on the &ersion of the 'irtual (is% Ser&ice '(S# pro&ider that the subsystem is running- you may not be able to type a name for the !"N* +ype the !"N si2e and clic% the drop.do)n list to select bet)een megabytes M7#- gigabytes 87# and terabytes +7#* iSCSI (arget 3iSCSI on"y4 $f iSCS$ targets ha&e already been created on the subsystem- you can assign the !"N to one of those targets no)* Aou can also lea&e it unassigned for later use* Choose to assign the !"N to a ser&er or cluster* Aou can also choose to lea&e it unassigned for later use* $f you chose to assign the !"N and you ha&e already configured your ser&er connections- you can select the ser&er or ser&er cluster the !"N )ill be assigned to* $f you chose to assign the !"N to the ser&er you are currently managing )ith the Storage Manager for 9=
,o"ume Creation
&i'ard )age
+etai"s
SANs snap.in- you can create an N+FS &olume for the !"N* !ormat $f you select to format the &olume: As a general rule- lea&e the A""ocation unit si'e option as +efau"t* +he allocation unit size is the smallest amount of dis% space that can be allocated to hold a file* 0indo)s selects default si2es based on the si2e of the &olume* +hese default si2es are selected to reduce the amount of space that is lost and the amount of fragmentation on the &olume* +he :uic* !ormat option speeds the &olume creation process on large !"Ns* $f you )ant to scan for bad sectors during the formatting process- clear the chec% bo3 for this option and a full file format )ill be done* Note $f you prefer- you can select not to format the &olume and can use (is% Management to format it later* For more information about (is% Management- see http:>>go*microsoft*com>f)lin%>C!in%$dD?:;@@* $eview Settings and Create Storage 7efore creating the !"N- the )i2ard lists all the properties that you ha&e selected for the ne) !"N* Clic% Create to start the !"N creation process*
98
9?
20