Computer-implemented method, apparatus, and computer program product for securing node port access in a switched-fabric storage area network

摘要

A computer-implemented method, apparatus, and computer program product are disclosed for securing node port access in a switched-fabric storage area network. Permitted combinations of fabric port identifiers and node port identifiers are specified. A node port receives a request to access the node port. A node port identifier, which identifies the device that is attempting to access the node port, is determined from the request. A fabric port identifier is determined that identifies a fabric port through which the device transmitted the request. Access to the node port is granted if the fabric port identifier and node port identifier form a permitted combination.