HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 45

Selecting Authentication Protocols, To view the current authentication parameter settings for a switch

Get HP StorageWorks 2/16V - SAN Switch PDF manuals and user guides View all HP StorageWorks 2/16V manuals
Add to My Manuals
Save this manual to your list of manuals

Page 45 highlights

2 Selecting Authentication Protocols Use the authUtil command to: • Display the current authentication parameters • Select the authentication protocol used between switches • Select the Diffie-Hellman (DH) group for a switch Authentication is performed only when secure mode is enabled, but you can run the authUtil command either while secure mode is enabled or not. Run the command on the switch you want to view or change. This section illustrates using the authUtil command to display the current authentication parameters and to set the authentication protocol to DH-CHAP. See the Fabric OS Command Reference for more details on the authUtil command. To view the current authentication parameter settings for a switch 1. Log in to the switch as admin. 2. On a switch running Fabric OS v4.4.0, v5.0.1, v5.1.0, or v5.2.0, type authUtil --show; on a switch running Fabric OS v3.2.0, type authUtil "--show". Output similar to the following displays: AUTH TYPE HASH TYPE GROUP TYPE fcap,dhchap sha1,md5 0,1,2,3,4 To set the authentication protocol used by the switch to DH-CHAP 1. Log in to the switch as admin 2. On a switch running Fabric OS v4.x or v5.x, type authUtil --set -a dhchap; on a switch running Fabric OS v3.x, type authUtil "--set -a dhchap". Output similar to the following displays: Authentication is set to dhchap. When using DH-CHAP, make sure that you configure the switches at both ends of a link. Note If you set the authentication protocol to DH-CHAP, have not yet configured shared secrets, and authentication is checked (for example, you enable the switch), switch authentication fails. Secure Fabric OS Administrator's Guide Publication Number: 53-1000244-01 2-23

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
Secure Fabric OS Administrator’s Guide
2-23
Publication Number: 53-1000244-01
2
Selecting Authentication Protocols
Use the
authUtil
command to:
•
Display the current authentication parameters
•
Select the authentication protocol used between switches
•
Select the Diffie-Hellman (DH) group for a switch
Authentication is performed only when secure mode is enabled, but you can run the
authUtil
command
either while secure mode is enabled or not. Run the command on the switch you want to view or
change.
This section illustrates using the
authUtil
command to display the current authentication parameters
and to set the authentication protocol to DH-CHAP. See the
Fabric OS Command Reference
for more
details on the
authUtil
command.
To view the current authentication parameter settings for a switch
1.
Log in to the switch as admin.
2.
On a switch running Fabric OS v4.4.0, v5.0.1, v5.1.0, or v5.2.0, type
authUtil --show
; on a switch
running Fabric OS v3.2.0, type
authUtil "--show"
.
Output similar to the following displays:
To set the authentication protocol used by the switch to DH-CHAP
1.
Log in to the switch as admin
2.
On a switch running Fabric OS v4.x or v5.x, type
authUtil --set -a dhchap
; on a switch running
Fabric OS v3.x, type
authUtil "--set -a dhchap"
.
Output similar to the following displays:
When using DH-CHAP, make sure that you configure the switches at both ends of a link.
AUTH TYPE
HASH TYPE
GROUP TYPE
--------------------------------------
fcap,dhchap
sha1,md5
0,1,2,3,4
Authentication is set to dhchap.
Note
If you set the authentication protocol to DH-CHAP, have not yet configured shared
secrets, and authentication is checked (for example, you enable the switch), switch
authentication fails.