In our switches and in our fabric we use zoning At the HBA configuration utility we can use LUN Mapping but typically Automap is enabled because we have centralized configuration at our RAID system
At the subsystem we use LUN Masking These are complementary solutions solving the same problem.
Each approach has advantages and disadvantages: The HBA-based approach is more difficult to manage because each HBA must be individually configured. This also provides less security because HBAs can be maliciously reconfigured - which is why zoning should always be used as the primary layer of security. The subsystem-based centralized approach can be easier to manage and configure, but each new host must still be masked from the subsystem management interface. This offers more security, and is the approach used by many enterprise SAN storage solutions.