IP-SAN network access control list generating method and access control list setup method

摘要

It is an object of the present invention to realize filter setting peculiar to iSCSI communication on an IP network. In a management server, discovery domain information is acquired, in which the connection relationship between a TCP port number and an IP address allocated to an iSCSI node, whether the iSCSI node is an iSCSI initiator or an iSCSI target, and a group to which the iSCSI node belongs are described. For a set of iSCSI nodes belonging to the same group, an access control list in which the IP address of the iSCSI node which is the iSCSI initiator is a source and in which the TCP port number and the IP address of the iSCSI node which is the iSCSI target is a destination is generated and then is set in a communication device.