7-6 SANRAD V-Switch CLI User ManualAccess RightsThe creation of an identity limits the iSCSI initiators able to access an iSCSItarget and its underlying volumes. Now, you want to define the access rightsfor each identity-target pair. When you couple an identity and target, youassign access rights: read-write (RW), read-only (RO) or not accessible (NA).The access rights are per identity-target pair. An identity can be coupled withmultiple targets, each time with different access rights. As well, a target canhave multiple identities, each with different access rights.10152wwui2wwui1wwui10wwui9wwui8wwui7wwui4wwui3Ident Bwwui6wwui5iSCSI Target 1wwui21iSCSI Target 2wwui22iSCSI Target 4wwui24iSCSI Target 3wwui23Ident AIdent CIdent BVol 1Vol 4Vol 2Vol 3Vol 5Vol 6Read-WriteRead-WriteRead-OnlyRead-WriteFigure 7-6. Access Rights per Identity-Target PairIn Figure 7-6 Identity A is coupled with both Target 1 and Target 2. TheIdentity A – Target 1 pair is assigned iSCSI initiator read-write access to Target1 volumes. The Identity A – Target 2 pair, however, is assigned iSCSI initiatorread-only access to Target 2 volumes.When you assign an identity to a target, you give the identity a position,beginning with 1 and increasing in number with increasing specificity of theidentity. A position is an identity’s rank in the V-Switch scan for an iSCSIinitiator – identity match. When the V-Switch scans the list of identitiescoupled with a target, it starts with the highest position and stops with the firstiSCSI initiator – identity match. The V-Switch takes the first fit; not the best fit.
