Fabric Manager Users Guide, Version 6.1, Revision A - QLogic

4–Virtual Fabrics
Configuration
The layout is as follows:
Each VirtualFabric contain the following:
• One or more groups of devices
• One or more sets of Applications
• Administrator policies
The vFabrics control the security configuration for the given set of devices and
applications in the overall fabric.
Each VirtualFabric section can have one or more Applications and
DeviceGroups sections. Both the devices and the applications are matched
against PathRecord and Multicast SA queries. The returned SLID/DLID, PKey,
SL, and so on, are appropriate for the vFabric that contain the involved devices
and applications.
Device Membership and Security
Devices are specified by the devicegroup name in the following ways in the
VirtualFabric section:
• As Full Members:
group_name
Such devices may talk to any other Member or LimitedMember.
• As Limited Members:
group_name
When Security is 1 (On), LimitedMembers are not permitted to talk to other
LimitedMembers. However, LimitedMembers can always talk to Members.
LimitedMembers cannot join multicast groups in the vFabric.
When security is on for a vFabric, PKeys and switch hardware enforcement is
used to secure the vFabric and enforce the Members and LimitedMembers rule.
Security also ensures that devices in other vFabrics cannot talk to devices in the
given vFabric. This security includes, hardware enforced per-packet PKey
checking, and enforcement by switches and end nodes.
IB0054608-01 B 4-17