Dell Storage Manager 2020 R1 Administrator's Guide

About Access Policies

In earlier versions of the PS Series firmware, security protection was accomplished by individually configuring an access control record for each volume to which you wanted to secure access. Each volume supported up to 16 different access control records, which together constituted an access control list (ACL). However, this approach did not work well when large numbers of volumes were present. To address that issue, PS Series groups incorporated access policies and access policy groups that can be applied to one or more volumes.

Each access policy lets you specify one or more of the following authentication methods:

• CHAP user name (Challenge Handshake Authentication Protocol)
• IP address
• iSCSI initiator name

You can assign up to four access policies or access policy groups to a volume. The access policies or access policy groups assigned to a volume determine which hosts have access to that volume. In addition, you can allow or disallow volume access from multiple initiators, depending on your configuration needs.

An access policy or access policy group can apply to the volume, its snapshots, or both. For example, you can authorize computer access to a volume and its snapshots or to the volume only.