Abstract: A network of switches with a distributed name server configuration and caching of remote node device information is disclosed. The network preferably comprises a first switch coupled to a second switch. Each of the switches directly couple to respective node devices. The first switch maintains a name server database about its local node devices, as does the second switch. The second switch further maintains a information cache about remote node devices. The name server preferably notifies other switches of changes to the database, and the cache manager preferably uses the notifications from other switches to maintain the cache. The name server accesses the cache to respond to queries about remote node devices. The cache manager may also aggregate notification messages from other switches when notifying local devices of state changes. Traffic overhead and peak traffic loads may advantageously be reduced.

Abstract: A network of switches that employ Registered State Change Notifications (RSCNs) with enhanced payloads is disclosed. In one embodiment, the network comprises multiple switches coupled together, and multiple node devices each directly-coupled to at least one other switch. Each of the switches preferably provides RSCNs to other switches when a node device state change is detected. One or more of the RSCNs preferably includes a device entry having more than four properties associated with the node device undergoing the state change. The switches receiving the enhanced RSCNs preferably maintain caches of remote node device entries copied from the RSCN device entries. The device entries preferably include one or more of the following: Owner Identifier, Port Type, Port Identifier, Port Name, Node Name, Initial Process Associator, Node IP Address, Class of Service, FC-4 Types, Port IP Address, Fabric Port Name, and Hard Address. Traffic overhead may advantageously be reduced.

Abstract: A network of switches with a distributed name server configuration and push/pull caching of remote node device information is disclosed. The network comprises a first switch coupled to a second switch. Each of the switches directly coupled to corresponding node devices. The first switch maintains a database of information about its local node devices. The second switch maintains a information cache about remote node devices, and periodically verifies that the cache information matches the database information on the first switch. The second switch preferably notifies node devices directly coupled to the second switch of state changes after notification messages are received from the first switch, and after mismatches are detected between the cache and the database. The second switch preferably responds to any queries about remote node devices by accessing the cache. In this manner, name server traffic overhead may advantageously be reduced in a robust, efficient manner.

Abstract: A method and apparatus for securing networks, focusing on application in Fibre Channel networks. A combination of unique security techniques are combined to provide overall network security. Responsibility for security in the network is assigned to one or more designated entities. The designated entities deploy management information throughout the network to enhance security by modifying the capabilities and operational permissions of the devices participating in the network. For example, through network control: logical management access or physical I/O access may be limited on a per device or per I/O basis; and all devices and ports in the network operate only with other approved devices and ports. These designated entities can better manage network security by exploiting a unique link authentication system as well as a unique push-model secure distributed time service.

Abstract: A method and system for starting up a network or network device with particular discussion regarding Fibre Channel networks and switches. The method and system relate to powering on or re-starting a plurality of Fibre Channel switching devices, each of those devices having ports. The system generally calls for the selection of a priority threshold that relates to the importance of tasks in fabric formation. Some embodiments of the system exploit a port authentication procedure to separate the execution of tasks higher in priority than the threshold from tasks lower in priority than the threshold.

Abstract: A network configuration device or entity has control of defined management and security functions in the network, or in many embodiments, in a Fibre Channel fabric. The network configuration device may control many functions. Foremost, it may control the recognition, operation and succession procedure for network configuration entities. It may also control user configurable options for the network, rules for interaction between other entities in the network, rules governing management-level access to the network, and rules governing management-level access to individual devices in the network. In addition, the network configuration entity may exploit policy sets to implement its control.

Abstract: A secure and distributed time service is discussed for use in a network. In particular, the invention relates to Fibre Channel networks and the secure distribution of time service using a push model. In order to distribute time on a push model, one entity assumes responsibility for time in the network. Other entities in the network receive periodic time updates and check the validity of their own time by gauging the elapsed time since the previous time update. The time service is secured using by applying a unique combination of encryption techniques.

Abstract: An adjunct processor controls an inter-fabric service link (IFSL) coupled to at least two independent SAN switching networks. The inter-fabric service link is coupled between multiple switching fabrics to allow the attached switching fabrics to be logically managed as a single entity while still being physically independent of each other. The IFSL does not transmit nor receive data being transmitted from a storage device to a host; rather, only management data is transmitted along the IFSL. The IFSL includes an inter-fabric adjunct processor, and a plurality of connections to the attached switching fabrics on which the IFSL communicates with IFSL agents operating on various switching elements within the attached switching fabrics. IFSL agents generate management data corresponding to the particular switching element on which the agent operates. This management data is intermittently transmitted to the IFSL for processing.

Abstract: Fault tolerant techniques to update a distributed database in a switched-fabric network are described. A commit master switch initiates an update operation using a four-phase process that provides for the automatic fail-over to a second (or more) switches if the commit master should not complete the update operation. In response to a lost commit master switch, one or more switches may assume the role of the commit master to either abort or complete the update operation.

Abstract: A method and system for authenticating devices in a network with particular discussion regarding Fibre Channel networks and switches. The method and system relate to mutual authentication between two connected ports. Generally, such two ports are connected by a medium dedicated exclusively to those ports. The method and system involve the exchange of authenticating information between the ports including host switch information, various encode or decode information, and secreting technique information such as encryption key information. Varying embodiments allow for full mutual authentication between two ports with a two, three or four phase exchange. Furthermore, by employing the authentication processes multiple times, full switching devices may be mutually authenticated.

Abstract: A method eliminates the discharge of the backup battery (42) prior to the primary source of power initially being applied to the device. The method comprises detecting the application of a source of primary power (12) and providing a path by way of a switch (46) in response to receiving the power (14), wherein the path allows the backup battery to power the device. Also, a circuit for maintaining the charge in a backup battery (42) of a device before primary power is applied comprises a sensing circuit (60) for generating an activation signal after initially sensing the application of the primary power to the device, and a switch element (61) coupled the sensing circuit (60) to receive the activation signal. The switch element (61) provides a path for the backup battery (42) to power the device.