Storage area network system, controller, access control method and program

The storage area network system according to 1, wherein,

• the access control apparatus has therein stored an access control information stating the storage apparatus(es) that can or can not be accessed by the individual hosts;
• the controller managing access control, using the switch, based on the access control information.

The storage area network system according to 1, wherein,

• the access control apparatus monitors operating states of each host;
• and wherein,
• the controller controls the switch so as to block the accessing to the storage apparatus(es) from the host in the standby state based on information delivered from the access control apparatus.

The storage area network system according to 3, wherein,

• when change has occurred in the host that is in an active state or in the host that is in the standby state, the access control apparatus notifies the controller of the content of the change;
• the controller controlling the switch so as to prohibit accessing to the storage apparatus(es) from the host(s) that has turned into the standby state and to permit access to the storage apparatus(es) from the host(s) that has turned into the active state.

The storage area network system according to 3, wherein,

• on detecting that the host in the active state has failed, the access control apparatus selects one of the hosts that belongs to same group as the failed host and that is in the standby state;
• the access control apparatus causing such host to transfer to the active state.

A controller, comprising a switch control section that sets control information in a switch arranged between a storage apparatus(es) and a plurality of hosts, together forming a storage area network employing the Ethernet, so as to control communication between the storage apparatus(es) and the hosts, wherein,

• the control information that is set by the switch control section corresponds to an access accept/deny delivered from an access control apparatus which provides information on whether or not accessing between the hosts and the storage apparatus(es) is allowable.

An access controlling method in a storage area network system employing the Ethernet, comprising a storage apparatus(es), a plurality of hosts, a switch arranged between the storage apparatus(es) and the hosts, a controller that sets control information in the switch so as to control communication between the hosts and the storage apparatus(es), and an access control apparatus that holds information on whether or not accessing between the hosts and the storage apparatus(es) is allowable;

• the method comprising
• acquiring, from the access control apparatus, the information indicating whether or not accessing between the hosts and the storage apparatus(es) is allowable, and
• setting, in the switch, the control information corresponding to the information on an access accept/deny that is delivered from the access control apparatus.

A non-transitory computer-readable recording medium storing a program that causes a computer which forms a controller arranged in a storage area network system employing the Ethernet, comprising, in addition to the controller, a storage apparatus(es), a plurality of hosts, a switch arranged between the storage apparatus(es) and the hosts, and an access control apparatus that delivers to the controller information on whether or not accessing between the hosts and the storage apparatus(es) is allowable;

• the controller setting the control information in the switch to control communication between the hosts and the storage apparatus(es);
• to perform processing of acquiring, from the access control apparatus, the information indicating whether or not accessing between the hosts and the storage apparatus(es) is allowable, and
• processing of setting, in the switch, the control information corresponding to an access accept/deny that is delivered from the access control apparatus.