Creating port sets and binding igroups to port sets

In addition to using Selective LUN Map (SLM), you can create a port set and bind the port set to an igroup to further limit which LIFs can be used by an initiator to access a LUN. If you do not bind a port set to an igroup, then all of the initiators in the igroup can access mapped LUNs through all of the LIFs on the node owning the LUN and the owning node's HA partner.

Before you begin

You must have at least one LIF and one igroup.

Unless you are using interface groups, two LIFs are recommended for redundancy for both iSCSI and FC. Only one LIF is recommended for interface groups.

About this task

It is advantageous to use ports sets with SLM when you have more than two LIFs on a node and you want to restrict a certain initiator to a subset of LIFs. Without port sets, all targets on the node will be accessible by all of the initiators with access to the LUN through the node owning the LUN and the owning node's HA partner.

Create a port set containing the appropriate LIFs: portset create -vserver vserver_name -portset portset_name -protocol protocol -port-name port_name
If you are using FC, specify the protocol parameter as fcp . If you are using iSCSI, specify the protocol parameter as iscsi .
Bind the igroup to the port set: lun igroup bind -vserver vserver_name -igroup igroup_name -portset portset_name

Verify that your port sets and LIFs are correct: portset show -vserver vserver_name

Example

Vserver   Portset   Protocol Port Names    Igroups
--------- --------- -------- ------------- --------
vs3       portset0  iscsi    lif0,lif1     igroup1

Give documentation feedback