LUN security should be done at the LUN level in the SAN by associating WWNs of adapters to particular LUNs in a fabric. This should be accomplished by microcode internal to each array. Using this approach eliminates the need to perform switch zoning at the fabric level, although that is still an option that can be used to further partition a fabric for management reasons (all SUN and all NT in different zones). If the array allows renaming WWN connections to system names, than "switch domain-system name" can be used as a naming convention for unpartitioned fabrics.
Dig deeper on SAN management
Related Q&A from Christopher Poelker
SAN expert Chris Poelker compares connecting a SAN with wavelength cabling and dark fiber and discusses the pros and cons of each.continue reading
SAN expert Chris Poelker discusses how to change the size of a LUN in a Microsoft cluster server environment.continue reading
Storage expert Chris Poelker outlines WWN basics in order to answer the question: "Why do HBAs in a SAN have same base?"continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.