Security - We will get there

1. Switched Gigabit Ethernet network : Connect arrays and hosts to a switched network and ensure that all network connections between hosts and arrays are Gigabit Ethernet. An array can operate at 10 and 100 Mbits, but performance will be significantly degraded.
2. Multiple network connections: For increased bandwidth and availability, connect multiple network interfaces to the network (and different switches, if possible). Connect interfaces in the following order: Ethernet 0, Ethernet 1, and Ethernet 2. After the initial setup, use the Group Manager GUI or CLI to assign an IP address and netmask to each additional interface.
3. Access to the group IP address: In a multi-subnet group, each configured network interface should have access to the subnet on which the group IP address resides.
4. Redundant network paths: Using a multipathing solution helps to ensure that no single point of failure exists between hosts and arrays.
5. For replication, a reliable, adequately sized network link: For effective and predictable replication, be sure that the network link between the primary and secondary groups is reliable and provides sufficient bandwidth for copying data.
6. No STP functionality on switch ports that connect end nodes: Do not use Spanning-Tree (STP) on switch ports that connect end nodes (iSCSI initiators or storage array network interfaces). However, if you want to use STP or RSTP (preferable to STP), you should enable the port settings available on some switches that let the port immediately transition into STP forwarding state upon link up. This functionality can reduce network interruptions that occur when devices restart, and should only be enabled on switch ports that connect end nodes. Note: The use of Spanning-Tree for a single-cable connection between switches is encouraged, as is the use of trunking for multi-cable connections between switches.
7. Flow Control enabled on switches and NICs: Enable Flow Control on each switch port and NIC that handles iSCSI traffic. PS Series arrays will correctly respond to Flow Control.
8. Unicast storm control disabled on switches: Disable unicast storm control on each switch that handles iSCSI traffic, if the switch provides this feature. However, the use of broadcast and multicast storm control is encouraged on switches.
9. Jumbo Frames enabled on switches and NICs: Enable Jumbo Frames on each switch and NIC that handles iSCSI traffic to obtain any performance benefit and ensure consistent behavior.
10. VLANs: Configure switches to use VLANs in order to separate iSCSI SAN traffic from other network traffic.

From Dell EqualLogic SAN manual and though it could be useful for all kinds of iSCSI network implementation.

A closer look at the network monitoring system will be another important aspect for successful iSCSI implementation.