Question

A storage administrator is hardening a MDS/Nexus Fibre Channel fabric that spans two data centers. Management requires that only explicitly approved switches be allowed to join VSAN 20, and any unauthorized switch attempting to merge into the fabric must be prevented from doing so and have its E_Port isolated. Which security feature meets this requirement?

Accepted Answer

Fabric binding, which authorizes ISL formation based on a configured list of switch WWNs (sWWNs)

Answer

Port security, which binds device pWWNs to specific F_Ports on the switch

Answer

Hard zoning enforced by the switch ASICs using WWPN-based zones

Answer

FC-SP DHCHAP configured only on host-facing F_Ports