4.yeslab數(shù)據(jù)中心存儲課程iscsi協(xié)議與配置

1、.FCFCIPiSCSIFCoEYeslab.FCFCIPiSCSIFCoEYeslab數(shù)據(jù)中心課程作者：馬?，F(xiàn)任明教教Yeslab數(shù)據(jù)中心iSCSI協(xié)議與iSCSI協(xié)議與配置內容簡介iSCSI協(xié)議與配iSCSI協(xié)議與配置iSCSIProtocoliSCSI協(xié)議與配置iSCSIbringsthe ideaiSCSI協(xié)議與配置iSCSIbringsthe ideaof a blockstorageSANto customerswithno Fibre Channel infrastructure.iSCSIis an IETF standardforencapsulatingSCSIcontro

2、land CP/IPpackets,iSCSICP/IPand Ethernetframes.TCPis usedtohandle droppedEthernetframes or significanttransmis iSCSI協(xié)議與配置iSCSI術語（1）iSCSIiSCSI協(xié)議與配置iSCSI術語（1）iSCSIAniSCSI initiator is alogical host-side device t serves the same function as a physical hostbus adapter in Fibre Channel or SCSI/SAS. iSCSI

3、 initiators can be software initiators,The other form of iSCSI initiators are hardware initiators. An iSCSI initiator is identified by an iSCSI qualified name.An iSCSI initiator uses aniSCSI network t consists ofone or IPaddresses. AniSCSIinitiator logs into.iSCSI協(xié)議與配置An is a-side iniSCSI協(xié)議與配置An is

4、a-side int serves thesame function asChannel SANs. It is thet hosts sand masks tospecific iSCSI is identified by an iSCSIName.An uses an iSCSI t consists ofone or more IP iSCSI協(xié)議與配置iSCSI it ) An is hostediSCSI協(xié)議與配置iSCSI it ) An is hosted by an . There can one or sbehind asingle .iSCSI network portal

5、 An iSCSI network portal oneormore IP addresses iSCSI initiator or iSCSIt are used by.iSCSI協(xié)議與配置iSCSI Qualified Name (IQN) AniSCSI協(xié)議與配置iSCSI Qualified Name (IQN) An iSCSI qualified (IQN) serves the e of the WWNin Fibre Channel it is the unique identifier for an iSCSI , .The format of the IQN is base

6、d on the iSCSI IETF The iSCSI qualified name is restricted to um length of 223 alphanumeric characters and a minimum length of 16 characters.iSCSI協(xié)議與配置Sic/dynamic discovery iSCSI uses a ofdiscovery where theiSCSI協(xié)議與配置Sic/dynamic discovery iSCSI uses a ofdiscovery where theiSCSI initiator can an for

7、the s.discovery involves amanual whereas dynamic discovery es an iSCSI- d to oneof thestandard ss onthearray. reports all theavailable particular initiator.s stiSCSI協(xié)議與配置iSCSICCIEiSCSI協(xié)議與配置iSCSICCIETypicallyusedin small tomid-range NodedicatedSAN switchess noSAN switching knowledge1/10GigE iSCSI har

8、dwareoffloadcardsiSCSIis notSAN Endhosts run justStorageArray runsjustTransportis anythingHow doesit applytoMDS asaniSCSI toFCiSCSI協(xié)議與配置MDSis effectivelya translationalbridgefor FibreChannel& ThinkbridgingniSCSI協(xié)議與配置MDSis effectivelya translationalbridgefor FibreChannel& ThinkbridgingnEthernet&Frame

9、Relay in How iSCSIgateways FLOGIas usualto FC iSCSIInitiatorssendDiscovery tosMDShasIPenabled MDS ssisiSCSI InitiatorthinksJust thinksiSCSI Initiator is FChisscenario(FCinitiator&iSCSI tagart不支持N7K&N5K doesnotsupport iSCSI iSCSI協(xié)議與配置iSCSI協(xié)議與配置iSCSIiSCSI協(xié)議與配置iSCSISANViewiSCSIsIPS模塊創(chuàng)建了獨立的iSCSI協(xié)議與配置iSC

10、SISANViewiSCSIsIPS模塊創(chuàng)建了獨立的iSCSISAN層面和FCSAN層面,對于iSCSI層面IPS塊創(chuàng)建出iSCSI虛擬的Tagarts,并它們到FCSAN里面的物理可用的設備是iSCSI協(xié)議與配置FibreiSCSI協(xié)議與配置Fibre Channel SANViewiSCSI Host asan 這個虛擬的FC主機,類似與真的FC主機通信一樣iSCSI協(xié)議與配置iSCSItoFCP(FibreChannel)iSCSI協(xié)議與配置iSCSItoFCP(FibreChannel) TheiSCSI requestsandresponsesaretransportedover a

11、nIP nthehostsand theIPS moduleor MPS-14/2 TheSCSI requestsandresponsesare routedn thehostson an network andtheFibreChannelstoragedevice (converting iSCSI toFCP and vice versa). The IPS moduleor MPS-14/2 moduleperforms thisconverand The FCP requests or responses are transported bet or MPS-14/2 module

12、andtheFibreChannelstoragedevin theIPS .iSCSI協(xié)議與配置MDSiSCSIGateway ConfigureiSCSI協(xié)議與配置MDSiSCSIGateway ConfigureFC sConfigureIPto Enable ConfigureZoning/sserverat MDSs IPaddressiSCSIiSCSI協(xié)議與配置Presenting Fibres as sThe IPS moduleor MPS-14/2 modulepresentsphysicalFibre sasiSCSI s,allowing themtobe sed iS

13、CSI協(xié)議與配置Presenting Fibres as sThe IPS moduleor MPS-14/2 modulepresentsphysicalFibre sasiSCSI s,allowing themtobe sed byhosts.The modulepresentssin one ofthetwo Dynamic-自所有的設備作為設備會自動創(chuàng)建iSCSI的名字,規(guī)則如下IPS Gigabit Ethernet t are not part of a Virtual Router Protocol(VRRP) group or PortChannel use this .ci

14、sco:05.-IPS t are part ofa VRRP group use this .cisco:05.vrrp-#-vrrp-IP-t are part ofa PortChannel use this .cisco:02.pc-port-ch-iSCSI協(xié)議與配置Presenting Fibres as sSiciSCSI協(xié)議與配置Presenting Fibres as sSic-可以手動靜態(tài)的創(chuàng)建義的一個唯一iSCSIIQN名字注意一個多個端口iSCSI協(xié)議與配置Presenting iSCSI HostsasVirtualFibreChannel The IPS modul

15、eoriSCSI協(xié)議與配置Presenting iSCSI HostsasVirtualFibreChannel The IPS moduleor MPS-14/2 moduleconnectsto theFibrestoragedevi transfer daonbehalfof theiSCSI hosttodso and fromthestorage . These modulesusevirtual FibreChannelN porttos theFibreChannelonbehalfof theiSCSI 用于決定iSCSI主機與N的關系,在iSCSI接口上配置標識initiat

16、or的方式基于IQN或者基于IP地址來標示InitiatoriSCSIhostsidentifiedbyeitheriSCSI qualifiedname(IQN) or IP 一個帶有多個IP地址的initiator主機(擁有多塊網卡)只擁有一個IQN名字默認iSCSI接口上是通過IQN識別的erfaceiscsi switch(config-if)#switchportinitiator id ip-address switch(config-if)# switchport initiator id nameiSCSI協(xié)議與配置Initiatorion Two modes are avai

17、lable to presentiSCSI hosts transparentinitiatormodeandiSCSI協(xié)議與配置Initiatorion Two modes are available to presentiSCSI hosts transparentinitiatormodeandproxy initiatormode.heFibreChannel在transparent initiator模式下,每一個iSCSI 主機都被體現(xiàn)作為一個虛擬的FC主機, 好就是可以使用更精細的控制配置,因為可以從iSCSI到FC實現(xiàn)1對1關系在proxy initiator模式下,在每個IP

18、S接口上只有一個虛擬的FC主機,所有的iSCSI主機由它后面的s,使用這種模式可以簡化配置iSCSI協(xié)議與配置WWNAssignment foriSCSI在transparentinitiator模式下An iSCSI hostis mappedtoan NportsiSCSI協(xié)議與配置WWNAssignment foriSCSI在transparentinitiator模式下An iSCSI hostis mappedtoan Nportsbyoneofthefollowingmechanisms(一個iSCSI主機被 成一個N portDynamic - 每個iSCSI主機動態(tài)產生pWWN

19、和nWWN,每次iSCSI主機的連可到不同的WWNs.iSCSI dynamic is the default mode ofThis configuration isdistributed using Sic -使用靜,每個iSCSI主機到一個指定的pWWN和這個模式適合在FC設備上需要控制的情況下,例如Open-e的FC卷上需要做特定WWN指派.完成這個靜可以通過下面兩個方式Userassignment-Youcanspecifyyourown unique WWNbyprovidingthemduring configuration t the switchprovideaWWNfrom

20、the switchsFibre in its configurationChannelWWNpooland keepthe iSCSI協(xié)議與配置VSANMembership forSAN membership canbe configured for an erface, called the portiSCSI協(xié)議與配置VSANMembership forSAN membership canbe configured for an erface, called the port VSAN. the iSCSI t connect to erface e members ofVSAN, if

21、it isnot explicitly configured ina VSAN. The default port VSAN of an erface isVSAN 1. Similar to Fibre Channel ,iSCSI have mechanisms by which VSAN membership canbe iSCSI hostVSAN membership toiSCSI host. This method takes precedent the erface(這種方式會取代iSCSI接口的vsan配置erfaceVSAN membership to erface. (A

22、ll iSCSI hosts to this erface inherit erface VSAN membership ifthe host is configured in any VSAN by the iSCSI host iSCSI協(xié)議與配置iSCSIs Twomethodsof scontrolareavailable foriSCSI . ontheinitiator mode usedtopresenttheiSCSI heFibre fabric,either or bothof thes control iSCSI協(xié)議與配置iSCSIs Twomethodsof scont

23、rolareavailable foriSCSI . ontheinitiator mode usedtopresenttheiSCSI heFibre fabric,either or bothof thes control methodscan beFiber Channel zoning-based ac beenextendedtosupportiSCSI devis controlFibreChannelzoning, and thishas advantageofhaving auniform,flexibles controlmechanism across wholehecas

24、eof iSCSI, multipleiSCSI may bebehindavirtualFCinitiator (proxy erface-basedzoningmaynotbe erface will automatically beusefulbecauseall iSCSI behindhesamezone. ZoningbasedontheiSCSI nodenameor IP willve anyiSCSIACL-basedscontroliSCSI-baseds controlapplicableonlyif iciSCSIsare created.For aic,youcanc

25、onfigurealistofiSCSI tareallowedtoss. Bydefault,iciSCSIsarenotsible to iSCSIDependingontheinitiatormodeusedtopresenttheiSCSI heChannelfabric,either or boththes control mechanismscan beiSCSI協(xié)議與配置iSCSI協(xié)議與配置部分iSCSIiSCSI協(xié)議與配置部iSCSI協(xié)議與配置部分iSCSIiSCSI協(xié)議與配置部分Configure FCsMDS9124上M9124A(config)# vsan M9124A(

26、config-vsan-iSCSI協(xié)議與配置部分Configure FCsMDS9124上M9124A(config)# vsan M9124A(config-vsan-vsan101 name vsan erface erface no shu er fc1/6switchport mode e switchport trunk mode onswitchport trunk allowed vsan 101 no shuMDS2(config-if)# vsan MDS2(config-vsan-db)# vsan101 name MDS2(config-er fc1/3 switchpo

27、rt mode eswitchport trunk mode on switchport trunk allowed vsan 101 no shuMDS2(config)# show fcns iSCSI協(xié)議與配置部分Configure IPtoer ipiSCSI協(xié)議與配置部分Configure IPtoer ip add 192.168.61.2no MDS2上MDS2(config-N5K-2上N5K-2(config)# vlan 61 iscsi-N5K-2(config-er N5K-2(config-speed 1000 switchport mode ac switchpor

28、t acc vlan 61er e1/31 speed switchport mode sswitchport trunk allowed vlan iSCSI協(xié)議與配置部iSCSI協(xié)議與配置部分 iSCSI協(xié)議與配置部iSCSI協(xié)議與配置部分ESXi上創(chuàng)建iSCSIiSCSI協(xié)議與配置部分測試ESXiiSCSIinitiator到MDSiSCSIiSCSI協(xié)議與配置部分測試ESXiiSCSIinitiator到MDSiSCSIGatewayMDS2上192.168.61.102 (192.168.61.102) 56(84) bytes of 64 bytes from 192.168.61

29、.102: 64 bytes from 192.168.61.102: 64 bytes from 192.168.61.102: 64 bytes from 192.168.61.102: 64 bytes from 192.168.61.102: ttl=64 time=0.679 ms ttl=64 time=0.683 ms ttl=64 time=0.651 ms ttl=64 time=0.666 ms ttl=64 time=0.648 - sistics -5 packets transmitted, 5 received,0% packet loss, time 4007ms

30、 rtt min/avg/max/mdev = 0.648/0.665/0.683/0.027 msiSCSI協(xié)議與配置部分EnableMDS2上feature iscsienableiSCSI協(xié)議與配置部分EnableMDS2上feature iscsienable module 1 er iscsi 1/1MDS2(config-no show iscsiiSCSI/iSLB Global information(fabric-wide) Authentication:CHAP,NONEInitiatoridle timeout:300 seconds Dynamic Initiator:

31、iSCSIiSLB Distribute:iSLBCFS:DoesnotNumberof load balancedVRRPgroups:0 Numberof load-balancedinitiators:0iSCSI/iSLBGlobal information(localtothisImport:InitiatorPlogitimeout:2 MDS2(config-if)# iscsiauthentication iSCSI協(xié)議與配置部分VirtualFCTagetsMDS2上MDS2(config)#iSCSI協(xié)議與配置部分VirtualFCTagetsMDS2上MDS2(confi

32、g)#iscsi和iSCSI InitiatorerfaceiscsiMDS2(config-if)#switchportinitiatorid ip-MDS2(config)#iscsiinitiatorip-address MDS2(config-iscsi-init)#s MDS2(config-iscsi-init)#icnWWN20:00:00:25:b5:00:00:01 icpWWNiSCSI協(xié)議與配置部分 s MDS2上MDS2(config-zone)# vsanMDS2(config-vsan-db)# vsan erface iscsi Traffic on iscsi1

33、/1may be impacted. iSCSI協(xié)議與配置部分 s MDS2上MDS2(config-zone)# vsanMDS2(config-vsan-db)# vsan erface iscsi Traffic on iscsi1/1may be impacted. Do you want to continue? (y/n) n y MDS2(config)# zone mode enhanced vsan 101WARNING: d would distribute the zoning database ofthis throughout the fabric. Do youwant to continue? (y/n)