Cisco Cisco Storage Media Encryption Manuales de usuario

Tabla de contenidos

• Audience

  4
• What Is New

  4
• Cisco Storage Media Encryption Overview

  4
• Cisco SME Terminology

  6
• Terminology Specific to Cisco SME Tape

  6
• Terminology Specific to Cisco SME Disk

  6
• Cisco SME Requirements

  7
• Software Requirements

  7
• Hardware Requirements

  7
• Security Engine Requirements

  7
• Cisco DCNM and KMC Workstation Requirements

  8
• Smart Card Readers

  8
• License Requirements

  9
• Topology Requirements

  9
• Zoning Requirements

  11
• FC-Redirect Requirements

  11
• Requirements Specific to Cisco SME Disk

  12
• Requirements Specific to Cisco SME Tape

  12
• Configuration Requirements

  12
• Requirements for Replication and Snapshot Technologies

  12
• Cisco SME Data Flow

  12
• Write I/O Data Flow

  12
• Read I/O Data Flow

  13
• Single Cisco SME Switch

  14
• Cisco SME Solution Architecture

  15
• Cisco SME Security Architecture

  16
• Securing Communications Among Components

  16
• Securing Cisco SME Keys

  17
• Cisco SME Administrative Roles

  18
• Cisco SME Clustering

  19
• Cisco SME Data Flow in a Cluster

  19
• Failure Conditions

  20
• Cisco SME Design Considerations

  21
• Host-Based Cluster Considerations (Cisco SME Disk Only)

  21
• Cisco SME Clustering: High-Availability Considerations

  21
• Network Topologies

  22
• Topology Considerations

  22
• General Guidelines

  22
• Guidelines Specific to Multiple Clusters

  22
• Core-Edge Topology

  22
• Edge-Core-Edge Topology

  24
• FCIP Topology

  25
• Cisco SME Load-Balancing Considerations

  26
• Cisco KMC Considerations

  26
• Cisco KMC High Availability

  26
• Key Database High Availability

  27
• Cisco DCNM Guidelines

  27
• Cisco SME Solution Scalability Limits

  28
• Encryption Throughput Guidelines

  29
• Disk Encryption Latency Guidelines (Cisco SME Disk Only)

  30
• Read Operations

  30
• Write Operations

  30
• Sizing Guidelines

  30
• Sizing Using Line-Rate Disk or Tape Drive Throughput

  30
• Sizing Using Backup Window Calculations

  31
• Inserting Cisco SME Tape into Existing Cisco SANs

  31
• Cisco SME Disk Deployment in Storage Environments

  31
• Managing Replication with Cisco SME

  32
• Managing Snapshots in Cisco SME

  33
• Replication and Mirroring

  33
• Copy-on-Write Snapshots

  34
• EMC Recover Point IO Journal Snapshots

  35
• Mix of Disk and Tape Devices

  35
• Inserting Cisco SME Disk into Existing Storage Environments

  36
• LUNs Containing Preexisting Data

  36
• LUNs Not Containing Preexisting Data

  36
• Maintaining Data Security

  37
• Rekey (Cisco SME Disk Only)

  37
• Master-Key Rekey

  37
• Disk Key Replication

  37
• Appendix

  38
• Cisco SME Tape Checklist

  38
• Cisco SME Disk Checklist

  38
• Generic Checklist

  39
• Sizing and Placement Deployment Examples

  39
• Example 1: Single-Switch Single-Fabric Tape Backup Environment

  39
• Example 2: Core-Edge Topology Tape Backup Environment

  40
• Example 3: Edge-Core-Edge Topology Tape Backup Environment with Restricted Zoning

  42