User manual QUANTUM SCALAR I6000 PLANNING GUIDE

[. . . ] Plan ning Guide Pla nning Gu i de Planning Guide Planning Guide Quantum Scalar Quantum Scalar i6000 Library Library Scalar 6-66882-01 A i6000 Scalar i6000 Planning Guide, 6-66882-01 A, May 2010, Made in USA. Quantum Corporation provides this publication "as is" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability or fitness for a particular purpose. Quantum Corporation may revise this publication from time to time without notice. Making copies or adaptations without prior written authorization of Quantum Corporation is prohibited by law and constitutes a punishable violation of the law. [. . . ] Hosts can be attached to the library in the following ways: · FC drives can be directly-attached to host systems or to the SAN. In these configurations, the MCB has one library control port (Fibre Channel or SCSI) connecting to the controlling host computer. · Attachment of the FC drives to the FC I/O blade in the I/O management unit. There are two 4Gb fiber ports on each FC I/O blade that can be connected directly to the host or to the SAN. These ports provide a dedicated 4Gb library control port. Managing Your Remote Library The library can be managed locally or remotely using the Library Management Console (LMC). Locally, the LMC is displayed on the touch screen (operator panel) on the front of the library. This interface is accessed through a web browser , which is identical to the front panel interface, using Java RMI communications to provide real time updates to LMC clients. This enables the library to provide end-users with status changes and events as they occur. At a high level, remote access can be managed using security functions embedded within the Scalar i6000. This includes authentication via individual user names/passwords and access control settings which Scalar i6000 Planning Guide 29 Chapter 2 Description Managing Your Remote Library enable or disable specific access protocols to limit what type of remote management is possible. In addition to this, most customers should have one or more firewalls in place to govern remote access. As with any Internet accessible service, the LMC requires a communication path so that data can be transmitted between clients and the Scalar i6000. How this communication path is managed depends on the user's configuration. The following three scenarios typical configurations. Scenario 1: Internet based clients managing multiple internal Scalar i6000s 2 For most organizations, a single administrator will not be managing all storage resources. In this instance, as shown in figure 13 on page 30 multiple administrators and even Quantum service personnel may be asked to remotely access Scalar i6000s. Figure 13 Multiple Workstations In the scenario shown in figure 13, Quantum highly recommends using virtual private network (VPN) software to control access to the Scalar i6000. VPNs offer authentication and encryption services to protect data Scalar i6000 Planning Guide 30 Chapter 2 Description Managing Your Remote Library transmissions and determine who can access a corporate network. By using VPN, the LMC client appears to be inside the firewall and have unrestricted access when communicating with the library. While a VPN is recommended, customers could use port blocking to provide access. In this instance, the following firewall requirements must exist: · Inbound access to port 1099 (Java RMI server port) · Stateful access control ­ used with most web technologies (for example, web mail) to enable a server to communicate with the client that started the connection Scalar i6000 Planning Guide 31 Chapter 2 Description Managing Your Remote Library Scenario 2: Internal clients accessing a single library across an internal firewall 2 Another common customer configuration, is that a customer will want to allow multiple internal clients to manage a single Scalar i6000. For instance, as shown in figure 14 on page 32, network operation/data center staff providing monitoring services of specific resources. Administrators are inside the corporate firewall, but security considerations necessitate an additional firewall between administrators and the resources they manage. Figure 14 In the scenario shown in figure 14 customers can utilize port forwarding functionality to enable specific access to a Scalar i6000. Port forwarding works by taking all host communications directed to a specific port and forwarding them to a single IP device. In this case, port forwarding would be configured so that all communications to the Java RMI server port (1099) would be directed to the IP address of the Scalar i6000. [. . . ] d. LTO-3 WORM requires the installation of library firmware and WORM-supported LTO-3 tape drive code e. LTO-4 WORM requires the installation of the library firmware and WORM-supported LTO-4 tape drive code. f. LTO-5 WORM requires the installation of the library firmware and WORM-supported LTO-5 tape drive code. All LTO cartridges are the same size, which means they use the same magazines in the library. LTO drives can be directly attached to hosts, attached to the storage area network (SAN), or connected to FC I/O blades in the I/O management unit. [. . . ]