Reusable zone

Patent metadata

Field	Value
Publication number	US-10075476-B2
Application number	US-201315024701-A
Country	US
Kind code	B2
Filing date	Sep 27, 2013
Priority date	Sep 27, 2013
Publication date	Sep 11, 2018
Grant date	Sep 11, 2018

Abstract

Implementations of the disclosed technology may respond to a discovery request according to the origination of the discovery request. In these implementations, a discovery request for a connection to a device assigned to a reusable zone may be obtained. If the discovery request does not originate from a local switch group, the discovery response may indicate that there is no device at the connection.

First claim

The invention claimed is:

1. A method, comprising:
obtaining a first discovery request for a first connection to a first device assigned to a reusable zone;
generating a first discovery response, wherein if the first discovery request does not originate from a local switch group, the first discovery response indicates that there is no device at the first connection;
obtaining a second discovery request originating from a second device for a second connection to a third device assigned to a non-reusable zone; and
generating a second discovery response to the second discovery request, wherein if the second device is connected to the local switch group and is assigned to a permitted zone permitted to access the non-reusable zone, the second discovery response indicates that the third device is at the second connection.

2. The method of claim 1 , wherein:
if the first discovery request originates from a fourth device connected to the local switch group and assigned to a zone permitted to access the reusable zone, the first discovery response indicates that the first device is connected at the first connection.

3. The method of claim 1 , wherein:
if the second device is not connected to the local switch group and is assigned to a permitted non-reusable zone permitted to access the non-reusable zone, the second discovery response indicates that the third device is at the second connection.

4. The method of claim 1 , further comprising: using a map associating a fourth device transmitting the first discovery request with a switch group identification number to determine if the first discovery request does not originate from a local switch group.

5. The method of claim 2 , wherein a zone permission table is used to determine if the fourth device is assigned to the zone permitted to access the reusable zone.

6. The method of claim 1 , wherein obtaining the second discovery request is performed by an expander or a switch.

7. The method of claim 1 , wherein if the second device is not connected to the local switch group and is not assigned to any non-reusable zone, the second discovery response indicates that there is no device at the second connection.

8. The method of claim 1 , wherein if the first discovery request originates from a fourth device connected to the local switch group and is not assigned to a zone permitted to access the reusable zone, the first discovery response indicates that that there is no device at the first connection.

9. A switch, comprising:
a first transceiver to connect to a first device assigned to a reusable zone;
a second transceiver to connect to a second device assigned to a non-reusable zone;
a management port to receive a first discovery request for the first transceiver, and to transmit a first discovery response; and
a controller to generate the first discovery response;
wherein if the first discovery request does not originate from a local switch group, the first discovery response indicates that there is no attached device connected to the first transceiver;
wherein the management port is to receive a second discovery request for the second transceiver originating from a third device connected to a non-local switch group, and is to transmit a second discovery response; and
wherein the controller is to generate the second discovery response, wherein if the third device is assigned to the reusable zone or another reusable zone, the second discovery response indicates that there is no attached device connected to the second transceiver.

10. The switch of claim 9 , wherein if the first discovery request originates from a fourth device connected to the local switch group and assigned to a permitted zone permitted to access the reusable zone, the first discovery response indicates that the first device is connected to the first transceiver.

11. The switch of claim 9 , wherein:
if the third device is assigned to a permitted non-reusable zone permitted to access the non-reusable zone, the second discovery response indicates that the second device is connected to the second transceiver.

12. The switch of claim 9 , further comprising:
a zone management port to receive a list of reusable zones in a reusable zone group; and
the controller is to use the list to determine that the first device is assigned to the reusable zone.

13. The switch of claim 9 , wherein:
the management port is to receive a first switch group identification number;
the controller is to determine whether the first discovery request does not originate from the local switch group by determining if the first discovery request originated from a fourth device connected to a peer switch having a second switch group identification number different from the first switch group identification number.

14. The switch of claim 13 , wherein:
the controller is to generate a map associating the fourth device with the second switch group identification number during a topology discovery process and to use the map to determine if the first discovery request originates from the local switch group.

15. The switch of claim 11 , further comprising a third transceiver to connect to a second switch.

16. The switch of claim 12 , further comprising the zone management port to receive a list of non-reusable zones in a non-reusable zone group.

17. A non-transitory computer readable medium storing instructions executable by a processor to:
use an accessibility assignment for a plurality of devices to partition a plurality of switches connecting the plurality of devices into a plurality of switch groups; and
partition a set of available zone numbers into a reusable zone number group and a non-reusable zone number group; and
assign a device to the reusable zone number group or the non-reusable zone number group;
wherein, if the device is connected to a switch group and is assigned to the reusable zone number group, then the accessibility assignment indicates that the device is not accessible by any device not connected to the switch group.

18. The non-transitory computer readable medium of claim 17 , wherein:
if the device is connected to the switch group and is assigned to the non-reusable zone number group, then the accessibility assignment indicates that the device is not accessible by any device assigned to the reusable zone number group and not connected to the switch group.

19. The non-transitory computer readable medium of claim 17 , the instructions executable by the processor to:
assign a first device to the reusable zone number group by assigning a reusable zone number to the first device; and
assign the reusable zone number to a second device not connected to the switch group, the first and second device being mutually inaccessible in the accessibility assignment.

20. The non-transitory computer readable medium of claim 17 , the instructions executable by the processor to: assign a first device to the non-reusable zone number group by assigning a non-reusable zone number to the first device; and assign the non-reusable zone number to a second device not connected to the switch group, the first and second devices being mutually accessible in the accessibility assignment.

Assignees

• Hewlett Packard Entpr Dev Lp

Inventors

• Natrajan Balaji
• Hameed Sohail
• Puttaiah Pruthviraj Herur

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06F2213/0028

  Serial attached SCSI [SAS] · CPC title

• G06F21/62

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• G06F3/0637

  Permissions · CPC title