Method and apparatus for identifying IPsec security policy in iSCSI
AssigneeLSI Corporation
InventorsAndrew J. Spry, James A. Lynn
Life of this patent
Estimating the term…
Abstract
The present invention is directed to a method and apparatus for identifying IPsec security policy in iSCSI. In an exemplary aspect of the present invention, a method for identifying IPsec security policy in iSCSI includes the following steps. An IP address may be allocated to a physical port of an iSCSI network entity. The physical port may include at least one TCP listening port. For a discovery session, the IP address may be statically allocated (or permanently leased). For a normal session, the IP address may be statically allocated or DHCP assigned. A TCP listening port associated with the IP address in an iSCSI portal may then be used to link a security policy on an IP connection with iSCSI configuration.
Claims19
A method for identifying a security policy in iSCSI, comprising:
- allocating an IP address to a physical port of a iSCSI network entity, said physical port including at least one TCP listening port;
- and
- using one of said at least one TCP listening port with said IP address to link a security policy on an IP connection with iSCSI configuration, thereby enabling a definition of the security policy to be configured entirely on an iSCSI target to match requirements of an initiator's security policy without the need to include any initiator specific information in the target configuration.
A hardware apparatus for identifying a security policy in iSCSI, comprising:
- (a) means for allocating an IP address to a physical port of a iSCSI network entity, said physical port including at least one TCP listening port;
- and
- (b) means for using one of said at least one TCP listening port with said IP address to link a security policy on an IP connection with iSCSI configuration, thereby enabling a definition of the security policy to be configured entirely on an iSCSI target to match requirements of an initiator's security policy without the need to include any initiator specific information in the target configuration.
A computer-readable storage medium having computer-executable instructions for performing a method for identifying a security policy in iSCSI, said method comprising:
- allocating an IP address to a physical port of a iSCSI network entity, said physical port including at least one TCP listening port;
- and
- using one of said at least one TCP listening port with said IP address to link a security policy on an IP connection with iSCSI configuration, thereby enabling a definition of the security policy to be configured entirely on an iSCSI target to match requirements of an initiator's security policy without the need to include any initiator specific information in the target configuration.
An iSCSI network entity, comprising:
- an iSCSI controller;
- and
- a plurality of physical ports in said iSCSI controller, each of said a plurality of physical ports having an IP address and including at least one TCP listening port,
- wherein said at least one TCP listening port identifies at least one security policy used on a connection opened on said at least one TCP listening port, thereby enabling a definition of the security policy to be configured entirely on an iSCSI target to match requirements of an initiator's security policy without the need to include any initiator specific information in the target configuration.
Dependencies are inferred from the claim text.