EMC® VNX® Series Security Configuration Guide for VNX

IP packet reflect on VNX for file systems

IP packet reflect provides your network with an additional security level. Because the majority of network traffic on a Data Mover (including all file system I/O) is client-initiated, the Data Mover uses Packet Reflect to reply to client requests. With Packet Reflect, there is no need to determine the route to send the reply packets. Because reply packets always go out the same interface as the request packets, request packets cannot be used to indirectly flood other LANs. In cases where two network devices exist, one connected to the Internet and the other connected to the intranet, replies to Internet requests do not appear on the intranet. Also, the internal networks used by VNX for file are not affected by any packet from external networks.

Configuring and Managing Networking on VNX describes how to configure this feature.