What is required to configure host group security on a new HCP G10 with attached storage?

To configure host group security for an HCP G10 system using attached Fibre Channel (FC) storage, the World Wide Port Name (WWPN) of each Host Bus Adapter (HBA) in the HCP nodes is required. Host group security is managed on the back-end storage array (e.g., a Hitachi VSP). It involves creating a host group, adding the WWPNs of the HCP node's HBA ports to that group, and then mapping storage volumes (LUNs) to it. This ensures that only the authorized HCP nodes can access their designated storage, which is a fundamental principle of Storage Area Network (SAN) security and resource allocation.

A. MAC address of the back-end NICs: Incorrect. MAC addresses are used for Layer 2 identification in Ethernet networks, such as for iSCSI storage, not for Fibre Channel SANs.

B. MAC address of the front-end NICs: Incorrect. Front-end NICs handle client network traffic (e.g., S3 protocol access) and are not involved in the connection to the back-end SAN storage.

D. World Wide Node Name (WWNN): Incorrect. While a WWNN identifies an entire device, SAN zoning and LUN masking are configured using the more granular WWPN, which uniquely identifies a specific port on that device.

1. Hitachi Vantara Documentation: Hitachi Content Platform G10, G11, and G300S Installation Guide (MK-92HCP037-18).

Reference: Chapter 4, "Connecting to external storage," Section: "Connecting G10 nodes to a Fibre Channel SAN," Subsection: "Zoning the SAN."

Quote/Paraphrase: The guide explicitly states, "For each G10 node, you need the WWPNs for the HBAs that you want to connect to the SAN." It further instructs the administrator to "create host groups for the G10 nodes... When you create the host groups, you need to add the WWPNs for the G10 node HBAs to them." This directly confirms that WWPN is the required identifier.

2. Hitachi Vantara Documentation: Provisioning Guide for VSP G/F350, G/F370, G/F700, G/F900 (MK-92RD8035-27).

Reference: Chapter 3, "Provisioning Workflow," Section: "Registering hosts and allocating LUNs."

Quote/Paraphrase: This document details the storage-side configuration. When creating a host group for a Fibre Channel host, the guide specifies that the host is identified by its WWPN. The workflow involves creating a host, specifying its WWPN, adding it to a host group, and then presenting LUNs to that group. This corroborates the requirement from the perspective of the attached storage system.