hesela.devLUN masking
LUN masking controls which initiators may access selected logical units exposed by a storage system.
The storage system selects which logical units a host can access; Fibre Channel zoning separately governs fabric-port relationships. A reachable array port does not prove that the intended logical unit is presented. [1]
In the cited initiator-group implementation, a group lists FC host WWPNs or iSCSI node names. Mapping a LUN to that group authorizes its members, which can include several hosts. This is a product-specific example, not a universal configuration interface. [2]
Access permission is not exclusive write ownership. The multi-host mapping example does not itself establish application locking or shared-file-system coordination; those are separate design obligations.
Relations
- related
- Fibre Channel zoning, SAN, Fibre Channel, iSCSI, Logical unit number (LUN), SCSI initiator and target, Shared-disk file system, I/O fencing
Advantages
- Can expose selected logical units to selected host initiators. [1]
Limitations
- A mapping can authorize multiple hosts, so it must not be read as a single-writer guarantee. [2]
Citations
- Cisco: Enabling Cisco HyperFlex Systems to Coexist with Fibre Channel Shared Storage, Cisco MDS multilayer switches
- NetApp ONTAP 9: Learn about ONTAP SAN igroups
Sources & caveats
- Source-backed access-control explanation; no live array, security or failover test was performed.
- The separation of access permission from writer coordination is an engineering inference from the documented multi-host mapping, not a measured filesystem result.
- The initiator-group example is scoped to NetApp ONTAP 9. [2]