Abstract: The snapshot capability moving into the SAN fabric and being provided as a snapshot service. A well-known address is utilized to receive snapshot commands. Each switch in the fabric connected to a host contains a front end or service interface to receive the snapshot command. Each switch of the fabric connected to a storage device used in the snapshot process contains a write interceptor module which cooperates with hardware in the switch to capture any write operations which would occur to the snapshot data area. The write interceptor then holds these particular write operations until the original blocks are transferred to a snapshot or separate area so that the original read data is maintained. Should a read operation occur to the snapshot device and the original data from requested location has been relocated, a snapshot server captures these commands and redirects the read operation to occur from the snapshot area.

Abstract: The present invention provides a system and a method for filtering a plurality of frames sent between devices coupled to a fabric by Fibre Channel connections. Frames are reviewed against a set of individual frame filters. Each frame filter is associated with an action, and actions selected by filter matches are prioritized. Groups of devices are “zoned” together and frame filtering ensures that restrictions placed upon communications between devices within the same zone are enforced. Zone group filtering is also used to prevent devices not within the same zone from communicating. Zoning may also be used to create LUN-level and extent-level zones, protocol zones, and access control zones. In addition, individual frame filters may be created that reference selected portions of frame header or frame payload fields.

Abstract: A device for converting between the trunked and untrunked transmission of Fibre Channel frame data is described. During conversion, the device manages the flow of frame data in both the egress (from Fibre Channel ports to a non-Fibre Channel port) and ingress (from a non-Fibre Channel port to Fibre Channel ports) directions. In the egress direction, the device operates as a FIFO to transmit all frames received from the Fibre Channel ports to the non-Fibre Channel ports. In the ingress direction, every frame received by the non-Fibre Channel port is stored in one of up to four storage segments based on the frame data's virtual circuit and path number identifiers. Frames are transmitted out of each storage segment in the order in which they are received therein. The device may be a stand-alone device. The device may also be incorporated into a Fibre Channel switch or other apparatus that connects to a Fibre Channel network or switch.

Abstract: A method and system for a management station managing a plurality of routing devices within a fabric. In one embodiment, this management of routing devices comprising the fabric occurs in the Storage Area Network environment. Use is made of a protocol which already exists in a Storage Area Network environment, such as the Fibre Channel Protocol for SCSI (“FCP”, for managing routing devices within a fabric. Each routing device comprising the fabric is assigned a logical unit number, which, in one embodiment, is based on the domain identifiers of each routing device. Further, the routing device to which the management station is physically is also labeled as LUN 0, and serves as the logical fabric SCSI Enclosure Services controller unit. The fabric interacts with the management station as though the fabric were a logical fabric SCSI Enclosure Services device coupled to a plurality of logical fabric SCSI Enclosure Services units.

Abstract: A “high availability” system comprises one or more switches under the control of multiple control processors (“CPs”). One of the CPs is deemed to be “active,” while the other CP is kept in a “standby” mode. Each CP generally has the same software load including a fabric state synchronization (“FSS”) facility. The FSSs of each CP communicate with each other. The state information pertaining to an active “image” is continuously provided to a standby copy of the image (“standby image”). The CPs' FSSs perform the function of synchronizing the standby image to the active image. The state information generally includes configuration and operational parameters and other information regarding the active image. By keeping the standby image synchronized to the active image, the standby image can be rapidly transitioned to the active mode if the active image experiences a fault and continue where the previous active image left off.

Abstract: Systems and methods for monitoring network fabric memberships. In one embodiment, the method comprises: 1) determining a polling list of switches; and 2) processing each switch in the polling list. The processing may include: a) obtaining a list of sister switches from the current switch; b) associating the current switch with a new kith if the current switch is not already associated with a kith; c) identifying any of the sister switches associated with different kiths and merging said different kiths with the kith of the current switch; and d) associating each of the sister switches with the kith of the current switch. (A kith is an inclusive collection of switches constructed by combining lists of sister switches from each switch in the polling list.) The method may further comprise performing a matching operation between the kiths and a set of fabrics in a model of the network.

Abstract: A printed wiring board having differential pair signal traces has increased spacing between signal-carrying vias and ground or power planes and/or is equipped with selectively placed ground vias to enhance the impedance matching of the signal traces.

Abstract: Systems particularly a virtualization switch or a storage device, which include virtual ports connected to virtual devices with virtual worldwide names and virtual LUNs. Because Fibre Channel environment hosts can track worldwide names from one port to another and allow continuity in that regard, the virtual worldwide names are provided with relevant virtual LUNs and connected these to virtual ports so that the virtual devices can be moved as desired to overcome failures or to allow load balancing.

Abstract: An interfabric link between two separate Fibre Channel fabrics so that devices in one fabric can communicate with devices in another fabric without requiring the merger of the two fabrics. The interfabric switch performs a conversion or a translation of device addresses in each fabric so that they are accessible to the other fabric. This translation is preferably done using a private to public loop address translation. In a first embodiment the external ports of the interfabric switch are configured as E_ports. A series of internal ports in each interfabric switch are joined together forming a series of virtual or logical switches. The virtual switches are then interconnected using private loops. The use of the private loop is enabled by the presence of translation logic which converts fabric addresses to loop addresses and back so that loop and fabric devices can communicate.

Abstract: A method to dynamically allocate credits for a particular port to port link based on measured link distance during the initial interswitch link configuration process. An apparatus implementing such method or a software upgrade to retrofit existing switches.

Abstract: A system for remotely managing a device over a network comprises a data sampling engine, for receiving new data from the device, the new data corresponding to a component module of the device; a model object, coupled to the data sampling engine, for comparing the new data from the device with old data; and a view object, coupled to the model object, for updating the graphical representation of the device corresponding to the component module of the device. In a preferred embodiment, the device is a fiber channel switch. A method for managing a network device comprises the steps of: receiving new device data from the data sampling engine, the new device data corresponding to information regarding a particular module of the device; comparing the new device data with a set of old device data, the old device data corresponding to information which was received prior to receiving the new device data and which regards the particular module of the device; and transmitting a notification signal to the view object.

Abstract: A system including a storage processing device with an input/output module. The input/output module has port processors to receive and transmit network traffic. The input/output module also has a switch connecting the port processors. Each port processor categorizes the network traffic as fast path network traffic or control path network traffic. The switch routes fast path network traffic from an ingress port processor to a specified egress port processor. The storage processing device also includes a control module to process the control path network traffic received from the ingress port processor. The control module routes processed control path network traffic to the switch for routing to a defined egress port processor. The control module is connected to the input/output module. The input/output module and the control module are configured to interactively support data virtualization, data migration, data replication, and snapshotting.

Abstract: Include storage area network (SAN) switches having greater storage capacity to allow greater data logging and storage of larger, more complicated tables for zoning and other table-based applications. A hard disk drive can be included in the switch, with data logging performed to the hard disk drive and with the hard disk drive serving as a second level of virtualization to provide storage of large tables. In a variation, the data logging of the switch, and any other devices on the SAN, can be directed to an area or areas of one or more storage units attached to the SAN.

Abstract: Storage area network (SAN) switches having greater storage capacity to allow greater data logging and storage of larger, more complicated tables for zoning and other table-based applications. A hard disk drive can be included in the switch, with data logging performed to the hard disk drive and with the hard disk drive serving as a second level of virtualization to provide storage of large tables. In a variation, the data logging of the switch, and any other devices on the SAN, can be directed to an area or areas of one or more storage units attached to the SAN.

Abstract: In a system comprising a first fabric and a plurality of devices coupled to the fabric by fibre channel connections, the devices are logically grouped to form configurations and zones. A configuration includes at least one zone, and each zone includes at least one device as a member of the zone. Communications between the devices is restricted according to the configuration currently in effect. For example, one device may be permitted to communicate with another device only if they are members of a common zone.

Abstract: Disclosed is a method for authenticating a Fibre Channel virtual Inter Switch Link comprised of two or more connections made over a TCP/IP network by establishing a first TCP/IP connection between a first Fibre Channel device and a second Fibre Channel device; authenticating this first TCP/IP connection using, for example SLAP; establishing a second TCP/IP connection; sending a nonce from the first Fibre Channel device to the second Fibre Channel device over said second TCP/IP connection; returning the nonce from the second Fibre Channel device to the first Fibre Channel device over the first TCP/IP connection using Switch ILS protocol; comparing the nonce sent over second TCP/IP connection from the first Fibre Channel device to the second Fiber Channel device to the nonce returned over the first TCP/IP connection from the second Fibre Channel device to the first Fibre Channel device; and, accepting the second TCP/IP connection as authenticated if the nonce that was sent is the same as the nonce that was retu

Abstract: The invention relates to methods and associated systems for displaying network fabric data for managing electronic networks, such as computer networks, storage area networks (SANs), and the like. In one aspect, the invention provides a method for displaying parameters of a plurality of devices in a network for comparison, where each device has a plurality of parameters, including determining and storing values for a plurality of parameters for each of a plurality of devices, and displaying a table of said stored parameter values, where the parameters form a first dimension of the table and the devices form a second dimension of the table. As an example, methods may further include determining if values for a common parameter among devices are identical, and displaying the table without the parameter if all the values for the parameter are identical.

Abstract: The capability to encrypt or compress the traffic over network links, thus improving the security of the link on the performance of the links, and the capability to encrypt/decrypt data stored on the storage devices without requiring specialized hosts or storage devices. In a first embodiment, traffic to be routed over a selected link needing encryption and/or compression is routed to hardware which performs the encryption and/or compression and returned for transmission over the link. A complementary unit at the second end of the link routes the received frames to complementary hardware to perform the decryption and/or decompression. The recovered frames are then routed to the target device in a normal fashion. In a variation of this first embodiment the hardware is developed using an FPGA. This allows simple selection of the desired feature or features present in the switch. The switch can be easily configured to perform encryption, compression or both, allowing great flexibility to a system administrator.

Abstract: Managing cluster membership and providing and managing locks in the switches forming the interconnecting network. To manage the cluster membership, a zone is created, with indicated members existing in the zone and the zone being managed by the switches. The nodes communicate their membership events, such as alive messages, using an API to work with the switch to which they are attached. The desired membership algorithm is executed by the switches, preferably in a distributed manner. Each switch then enforces the membership policies, including preventing operations from evicted nodes. This greatly simplifies the programs used on the nodes and unburdens them from many time consuming tasks, thus providing improved cluster performance. In a like manner, the switches in the fabric manage the resource locks. The nodes send their lock requests, such as creation and ownership requests, to the switch to which they are connected using an API.

Abstract: A method and system for performing network merge testing are disclosed. In one embodiment, the network merge testing method comprises: (i) gathering configuration information from at least two networks; (ii) comparing the configuration information; and (iii) displaying a report that indicates whether an attempted merge of the at least two networks would succeed. The report preferably identifies conflicts between the network configurations, and the method may further include automatic or guided resolution of the conflicts. The configuration information may include: zone names and memberships; domain and port names; security settings; inter-op modes; and long distance modes. A system for implementing the method is also disclosed herein. The system and method may advantageously prevent or diagnose causes of network segmentation.