HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 46

Managing Shared Secrets, To view the list of switches with shared secrets in the current switches

Page 46 highlights

2 Managing Shared Secrets When you configure the switches at both ends of a link to use DH-CHAP for authentication, you must also define a pair of shared secrets-one for each end of the link. Use the secAuthSecret command to: • View the WWN of switches with shared secrets • Set the shared secrets for switches • Remove the shared secret for one or more switches This section illustrates using the secAuthSecret command to display the list of switches in the current switch's shared secret database and to set the pair of shared secrets for the current switch and a connected switch. See the Fabric OS Command Reference for more details on the secAuthSecret command. Note A Secure Fabric OS license is required to use the secAuthSecret command. When setting shared secrets, note that you are entering the shared secrets in plain text. Use a secure channel (for example, SSH or the serial console), to connect to the switch on which you are setting the secrets. To view the list of switches with shared secrets in the current switches database 1. Log in to the switch as admin. 2. On a switch running Fabric OS v4.x or v5.x, type secAuthSecret --show; on a switch running Fabric OS v3.x, type secAuthSecret "--show". The output displays the WWN, domain ID, and name (if known) of the switches with defined shared secrets: WWN DId Name 10:00:00:60:69:80:07:52 Unknown 10:00:00:60:69:80:07:5c 1 switchA 2-24 Secure Fabric OS Administrator's Guide Publication Number: 53-1000244-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118

2-24
Secure Fabric OS Administrator’s Guide
Publication Number: 53-1000244-01
2
Managing Shared Secrets
When you configure the switches at both ends of a link to use DH-CHAP for authentication, you must
also define a pair of shared secrets—one for each end of the link. Use the
secAuthSecret
command to:
View the WWN of switches with shared secrets
Set the shared secrets for switches
Remove the shared secret for one or more switches
This section illustrates using the
secAuthSecret
command to display the list of switches in the current
switch’s shared secret database and to set the pair of shared secrets for the current switch and a
connected switch. See the
Fabric OS Command Reference
for more details on the
secAuthSecret
command.
To view the list of switches with shared secrets in the current switches
database
1.
Log in to the switch as admin.
2.
On a switch running Fabric OS v4.x or v5.x, type
secAuthSecret --show
; on a switch running
Fabric OS v3.x, type
secAuthSecret "--show"
.
The output displays the WWN, domain ID, and name (if known) of the switches with defined
shared secrets:
Note
A Secure Fabric OS license is required to use the
secAuthSecret
command.
When setting shared secrets, note that you are entering the shared secrets in plain text. Use a secure
channel (for example, SSH or the serial console), to connect to the switch on which you are setting the
secrets.
WWN
DId
Name
-----------------------------------------------
10:00:00:60:69:80:07:52
Unknown
10:00:00:60:69:80:07:5c
1
switchA