Network security through configuration servers in the fabric environment

Abstract

A network configuration device or entity has control of defined management and security functions in the network, or in many embodiments, in a Fibre Channel fabric. The network configuration device may control many functions. Foremost, it may control the recognition, operation and succession procedure for network configuration entities. It may also control user configurable options for the network, rules for interaction between other entities in the network, rules governing management-level access to the network, and rules governing management-level access to individual devices in the network. In addition, the network configuration entity may exploit policy sets to implement its control.

1 - 29 . (canceled)  
     
     
         30 . A method of securing a network comprising the steps of: 
 providing a network configuration entity having network-wide control over a defined set of management functions, said set of management functions comprising (i) the recognition, operation and succession of the network configuration entity, (ii) one or more rules for interaction between and among entities in the network, (iii) one or more rules governing management level access to the network, and (iv) one or more rules governing management level access to one or more entities,    coupling said network configuration entity to one or more other devices;    placing the network configuration entity in a secure physical location; and    providing one or more back-up network configuration entities.    
     
     
         31 . The method of  claim 30  further comprising the step of placing said back-up network configuration entities in a secure physical location.  
     
     
         32 . The method of  claim 30  further comprising the step of selecting, upon a failure of the network configuration entity, a new network configuration entity from among said back-up network configuration entities.  
     
     
         33 . The method of  claim 32  wherein said selecting depends upon a pre-selected criteria.  
     
     
         34 . The method of  claim 33  wherein said pre-selected criteria is device serial number.  
     
     
         35 . The method of  claim 33  wherein said pre-selected criteria is a representation of a number uniquely identifying a device.  
     
     
         36 . The method of  claim 33  wherein said pre-selected criteria relates to the location of a device.  
     
     
         37 . The method of  claim 33  wherein said pre-selected criteria relates to the logical loading of a device.  
     
     
         38 . The method of  claim 33  wherein said pre-selected criteria relates to the functional capabilities of a device.  
     
     
         39 - 54 . (canceled)