Access management method between plural devices constituted by hierarchical relation, management computer, and computer system

A computer system comprising:

• a host computer;
• a second-tier storage system that has an actual data storage area storing data used by the host computer;
• a first-tier storage system that provides the host computer with a virtualized data storage area associated with the actual data storage area;
• a switch connected to the host computer, the first-tier storage system, and the second-tier storage system via a communication path;
• and
• a management computer connected to the host computer, the first-tier storage system, the second-tier storage system, and the switch via a network, wherein
• the switch has plural ports connected to the host computer, the first-tier storage system, and the second-tier storage system, respectively,
• the management computer includes:
• a memory that holds configuration information of plural zones permitting communication in the computer system via at least one port provided in the switch;
• and
• a control unit that, when any one of the zones is a first zone permitting communication between the host computer and a virtualized data storage area provided to the host computer, extracts a second zone permitting communication with an actual data storage area associated with the virtualized data storage area from the memory and instructs the switch to configure the second zone in association with the first zone via a network.

A switch comprising:

• plural switch ports connected to a host computer and plural devices via a communication path;
• a memory that holds zone configuration information that defines zones permitting communication including at least one of a path between plural devices or a path between the host computer and the devices;
• and
• a CPU that is connected to the memory and the switch ports, wherein
• the CPU reads out the zone configuration information from the memory, holds a first zone, which includes a switch port connected to a first device receiving a request from a host computer and a switch port connected to a second device storing the data, as a special zone among the zones defined by the zone configuration information, configures a second zone defined by a zone including the switch port connected to the first device in association with the first zone serving as the special zone, and permits communication among the switch ports.