Invention Grant
US08151318B1 Method and apparatus for reliably and asymmetrically distributing security information within a fibre channel fabric
有权
用于在光纤通道结构内可靠和不对称地分布安全信息的方法和装置
- Patent Title: Method and apparatus for reliably and asymmetrically distributing security information within a fibre channel fabric
- Patent Title (中): 用于在光纤通道结构内可靠和不对称地分布安全信息的方法和装置
-
Application No.: US10374490Application Date: 2003-02-25
-
Publication No.: US08151318B1Publication Date: 2012-04-03
- Inventor: Claudio DeSanti , Silvano Gai , Fabio R. Maino , Maurilio Cometto , Sachin Jain
- Applicant: Claudio DeSanti , Silvano Gai , Fabio R. Maino , Maurilio Cometto , Sachin Jain
- Applicant Address: US CA San Jose
- Assignee: Cisco Technology, Inc.
- Current Assignee: Cisco Technology, Inc.
- Current Assignee Address: US CA San Jose
- Agency: Weaver Austin Villeneuve and Sampson LLP
- Main IPC: G06F17/30
- IPC: G06F17/30 ; H04L12/56

Abstract:
A reliable asymmetric method for distributing security information within a Fiber Channel Fabric. The Switching Fabric includes a set of security servers, which maintain among themselves a replicated copy of the Fabric security databases using the currently defined Merge and Change protocols. The other Switches of the Fabric are configured as client-Switches. They maintain only the subset of the authorization and authentication information required for their correct operation. A client-Switch queries the security server when a new end-device is connected to it, or when it is connected to the Fabric. When the security configuration of the Fabric changes by an administrative action, a security server solicits the client-Switches to update their information. In an alternative embodiment, the end-devices may query directly the security server, usually for authentication purposes. A Fabric with a plurality of security servers balances among them the load of inquiries from clients, and is more reliable because it continues to operate in the event of failure of one or more servers. Reliability is achieved in a stateless manner through the FSPF protocol, the Fiber Channel routing protocol. Each security server announces itself to the Fabric by advertising an adjacency to a predefined virtual Domain_ID in its FSPF LSRs. Clients access servers by directing queries to this virtual Domain_ID.
Information query