Create and manage volume access groups

Contributors netapp-pcarriga netapp-dbagwell

A volume access group is a collection of volumes that users can access using either iSCSI initiators or FC initiators.

You can create access groups by mapping iSCSI initiator IQNs or FC WWPNs in a collection of volumes. Each IQN that you add to an access group can access each volume in the group without requiring CHAP authentication. Each WWPN that you add to an access group enables FC network access to the volumes in the access group.

Create an access group

You can create volume access groups with one or more initiators. Mapping Fibre Channel (WWPN) or iSCSI (IQN) client initiators to the volumes in a volume access group enables secure data I/O between a network and a volume.

Steps
  1. In your vSphere Web Client, open the Management tab:

    • Beginning with Element vCenter plug-in 5.0, select NetApp Element Remote Plugin > Management > Management.

    • For Element vCenter plug-in 4.10 and earlier, select NetApp Element Management > Management.

    Note If two or more clusters are added, ensure that the cluster you intend to use for the task is selected in the navigation bar.
  2. Select the Access Groups sub-tab.

  3. Select Create Access Group.

  4. Enter a name for the volume access group.

    Tip Use descriptive naming best practices. This is especially important if multiple clusters or vCenter Servers are used in your environment.
  5. Select an unassigned IQN or WWPN from the Select an Initiator drop-down list and click Add Initiator.

    Note Initiators may be added or deleted after the volume access group has been created.
  6. Click OK to create the access group.

Edit an access group

You can edit volume access group names or add or remove initiators from the plug-in extension point.

Steps
  1. In your vSphere Web Client, open the Management tab:

    • Beginning with Element vCenter plug-in 5.0, select NetApp Element Remote Plugin > Management > Management.

    • For Element vCenter plug-in 4.10 and earlier, select NetApp Element Management > Management.

    Note If two or more clusters are added, ensure that the cluster you intend to use for the task is selected in the navigation bar.
  2. Select the Access Groups sub-tab.

  3. Select the check box for the volume access group you want to edit.

  4. Select Actions.

  5. In the resulting menu, select Edit.

  6. Change the following as required:

    1. Modify the access group name.

    2. Add or remove initiators.

      Note If you are removing an initiator, click the trash icon to remove it. When you remove the initiator, it can no longer access the volumes in that volume access group. Normal account access to the volume is not disrupted.
  7. Select OK.

Add volumes to an access group

You can add volumes to a volume access group. Each volume can belong to more than one volume access group; you can see the groups that each volume belongs to from the Active volumes view.

What you’ll need
  • At least one cluster must be added and running.

  • At least one access group exists.

  • At least one active volume exists.

Steps
  1. In your vSphere Web Client, open the Management tab:

    • Beginning with Element vCenter plug-in 5.0, select NetApp Element Remote Plugin > Management > Management.

    • For Element vCenter plug-in 4.10 and earlier, select NetApp Element Management > Management.

    Note If two or more clusters are added, ensure that the cluster you intend to use for the task is selected in the navigation bar.
  2. Select the Volumes subtab.

  3. Select the check box for each volume that you want to add to an access group.

  4. Select Actions.

  5. Select Add to Access Group.

  6. Confirm the details and select a volume access group from the list.

  7. Select OK.

Remove volumes from an access group

You can remove volumes from an access group.

When you remove a volume from an access group, the group no longer has access to that volume.

Important Removing a volume from an access group can disrupt host access to the volume.
  1. In your vSphere Web Client, open the Management tab:

    • Beginning with Element vCenter plug-in 5.0, select NetApp Element Remote Plugin > Management > Management.

    • For Element vCenter plug-in 4.10 and earlier, select NetApp Element Management > Management.

    Note If two or more clusters are added, ensure that the cluster you intend to use for the task is selected in the navigation bar.
  2. Select the Volumes subtab.

  3. Select the check box for each volume that you want to remove from an access group.

  4. Select Actions.

  5. Select Remove from Access Group.

  6. Confirm the details and select the volume access group that you no longer want to have access to each selected volume.

  7. Select OK.

Delete an access group

You can delete volume access groups using the plug-in extension point. You do not need to delete initiator IDs or disassociate volumes from the volume access group prior to deleting the group. After you delete the access group, group access to the volumes is discontinued.

Steps
  1. In your vSphere Web Client, open the Management tab:

    • Beginning with Element vCenter plug-in 5.0, select NetApp Element Remote Plugin > Management > Management.

    • For Element vCenter plug-in 4.10 and earlier, select NetApp Element Management > Management.

    Note If two or more clusters are added, ensure that the cluster you intend to use for the task is selected in the navigation bar.
  2. Select the Access Groups sub-tab.

  3. Select the check box for the access group you want to delete.

  4. Select Actions.

  5. In the resulting menu, select Delete.

  6. Confirm the action.