Cisco MDS 9000 Family Storage Media Encryption Configuration Guide
Cisco SME Tape Management
Downloads: This chapterpdf (PDF - 748.0KB) The complete bookPDF (PDF - 10.16MB) | Feedback

Cisco SME Tape Configuration

Table Of Contents

Cisco SME Tape Configuration

About Cisco Storage Media Encryption Tape Management

Adding Tape Groups

Deleting Tape Groups

Adding Tape Devices

Deleting Tape Devices

Adding Tape Paths

Deleting Paths from a Device

Adding Tape Volume Groups

Deleting Tape Volume Groups

Viewing Host Details

Viewing Tape Device Details


Cisco SME Tape Configuration


This chapter contains information about managing tapes that are encrypted using Cisco SME. It includes the following sections:

About Cisco Storage Media Encryption Tape Management

Adding Tape Groups

Deleting Tape Groups

Adding Tape Devices

Deleting Tape Devices

Adding Tape Paths

Adding Tape Volume Groups

Deleting Tape Volume Groups

Viewing Host Details

Viewing Tape Device Details

About Cisco Storage Media Encryption Tape Management

Once provisioned, Cisco SME provides transparency to hosts and targets. To manage the paths from a hosts to tape devices, Cisco SME uses the following:

Tape group—A backup environment in the SAN. This consists of all the tape backup servers and the tape libraries that they access.

Tape device—A tape drive that is configured for encryption.

Tape volume—A physical tape cartridge identified by a barcode for a given use.

Tape volume group—A logical set of tape volumes configured for a specific purpose. Using Cisco SME, a tape volume group can be configured using a barcode range or a specified regular expression. In an auto-volume group, a tape volume group can be the volume pool name configured at the backup application.

Cisco SME provides the capability to export a volume group with an encryption password. This file could later be imported to a volume group. Also, volume group filtering options provide mechanisms to specify what type of information will be included in a specific volume group. For example, you could filter information in a volume group by specifying a barcode range.

Figure 5-1 shows the Cisco SME tape backup environment.

Figure 5-1 Cisco SME Tape Backup Environment and Configuration

The following concepts are used in tape management procedures:

Key management settings (see the "Key Management Settings" section)

Auto-volume group (see the "Auto-volume grouping" section)

Key-on-Tape (see the "Unique Key with Key-On-Tape" section)

Compression (see the "Compression" section)

Tape recycling (see the "Tape Recycling" section)

Exporting volume groups (see the "Exporting Volume Groups" section)

Importing volume groups (see the "Importing Volume Groups" section)


Note If data is written to a partially non-Cisco SME encrypted tape, it is left in clear text. When a tape is recycled or relabeled, the tape will be encrypted by Cisco SME.


Adding Tape Groups


Note If a tape is written before Cisco SME is activated, it will remain a clear text tape and will only become an encrypted tape when it is reformatted or relabeled on a tape drive that is defined in an active Cisco SME environment.



Note Messages are logged to the switch when the tapes bypass encryption.


To add a tape group, follow these steps:


Step 1 Select Tape Groups. Click Add.


Note A default volume group is created when the tape group is created; none of the configurations can be changed for the default volume group; however, you can create a new volume group.


Step 2 Enter a name for the tape group. Click Next.


Note You can click Finish to create an empty tape group that can be used for preprovisioning. You can specify the devices later.


Step 3 Select specific VSANs for the tape group. Click Next.

Step 4 Select the hosts (backup servers) for the tape group. Click Next.

Step 5 Select the tape drives for the tape group. Click Next.

Step 6 Select the paths to use to create the tape group. Click Next.

Step 7 Verify the information. Click Confirm to save and activate the changes. Your screen will refresh to the Fabric Manger Server SME screen.

Step 8 View the hosts, tape devices, and volume groups that belong to the tape group.


Note Messages are logged to the switch when tapes are bypassing encryption.



Deleting Tape Groups


Note Before deleting a tape group, you must first delete tape devices and tape volume groups.


To delete a tape group, follow these steps:


Step 1 Select Tape Groups to display the tape groups that are part of the cluster.

Step 2 Select a tape group and click Remove.

Step 3 Click OK to delete the tape group.


Adding Tape Devices

To add tape devices to an existing tape group, follow these steps:


Step 1 Click Tape Devices. Click Add.

Step 2 Select the VSANs that you would like to discover paths from. Click Next.

Step 3 Select the hosts that you would like to discover paths from. Click Next.

Step 4 Select the tape drives. Click Next.

Step 5 Select the paths that Cisco SME would use for encrypted data between the host and tape devices. Click Next.

Step 6 Confirm the addition of the new tape device. Click Confirm to close the Cisco SME wizard and to return to the Fabric Manager Server SME screen.

Step 7 View the new tape device that was added to the cluster.


Deleting Tape Devices

To delete a tape device from an existing tape group, follow these steps:


Step 1 Click Tape Devices, and then select the device you want to remove.

Step 2 Click Remove.

Step 3 Click OK to delete the tape device.

Step 4 View the notification that the tape drive has been removed.


Adding Tape Paths

Use the Tape Path Wizard to quickly add or modify tape paths between hosts and target backup devices.

To add a tape path to a tape device, follow these steps:


Step 1 Select a tape device.

Step 2 Click Add.

Step 3 Select the appropriate fabric and enter the VSAN, initiator and target WWNs, and the LUN. Click Next.

Step 4 Confirm the addition of the new tape path. Click Confirm to close the Cisco SME wizard and to return to the Fabric Manager Server SME screen.


Deleting Paths from a Device

To delete a tape path from a device, follow these steps:


Step 1 Click a tape device name to display the tape device details and the paths.

Step 2 Select a tape path and click Remove.

Step 3 Click OK to delete the tape path and to view the tape path removed notification.


Adding Tape Volume Groups

To add tape volume groups to an existing tape group, follow these steps:


Step 1 Click Volume Groups. Click Create.

Step 2 Enter the new volume group name and configure a filter that Cisco SME will use to match volumes for that volume group. Select from the following:

None—Used only if you want to import volume groups into another volume group (see Importing Volume Groups).

Regex—Cisco SME will place the volume if the barcode matches the expression.

Ranges—Cisco SME will place the volume within a specific barcode range.


Note Overlapping ranges are not recommended. If there are overlapping ranges, then Cisco SME places the volume based on the lexicographic ordering of the volume group.



Note If there is not a direct match, then the volumes will be placed in the default volume group.


Step 3 Confirm the addition of the new volume group. Click Confirm to close the Cisco SME wizard and to return to the Fabric Manager Server SME screen.

Step 4 View the new volume group added to the tape group.


Note For information on importing and exporting volume groups, see Chapter 6 "Cisco SME Key Management."



Deleting Tape Volume Groups

To delete a tape volume group from a Cisco SME cluster, follow these steps:


Step 1 Click Volume Groups to display the tape volume groups in the cluster.

Step 2 Select a tape volume group and click Remove.

Step 3 Click OK to delete the tape volume group and to view the volume group notification.


Viewing Host Details

You can view detailed information about hosts in a Cisco SME cluster. Information for a specific host includes the tape group membership, paths from the host to the target, VSAN, fabric, status, and the tape device.

To view the host details, select a host in the navigation pane.

Viewing Tape Device Details

You can view detailed information about tape devices in a Cisco SME cluster. Information for a specific tape device includes the tape group membership, device description, serial number, and the host and target PWWN.

To view the tape device details, select a tape device in the navigation pane.