Chapter 4. IBM TotalStorage b-type family routing best practices 51
between the 2109-A16s, you need to allow this traffic in the firewall. We
recommend that you also allow ping between the devices to make problem
determination easier.
To enhance security, you can configure each end of the FCIP tunnel with the
WWN of the SAN router in the remote end. This prevents any other router from
connecting to the port.
4.4.3 iSCSI gateway security
When opening the iSCSI session, the iSCSI initiator connects to the iSCSI
well-known TCP port 3260 in the router. If you have a firewall between the iSCSI
client and the 2109-A16, you need to allow this traffic in the firewall.
The iSCSI gateway function of the 2109-A16 supports the optional use of
Challenge ...