HP StorageWorks 8/80 HP StorageWorks Fabric OS 6.2 administrator guide (5697-0 - Page 136

loops through a sequence of switch specification, peer secret entry, and local secret entry. To exit the loop, press Enter for the switch name; and then enter y. switchA:admin> secauthsecret --set This command is used to set up secret keys for the DH-CHAP authentication. The minimum length of a secret key is 8 characters and maximum 40 characters. Setting up secret keys does not initiate DH-CHAP authentication. If switch is configured to do DH-CHAP, it is performed whenever a port or a switch is enabled. Warning: Please use a secure channel for setting secrets. Using an insecure channel is not safe and may compromise secrets. The following inputs should be specified for each entry: 1. WWN for which secret is being set up. 2. Peer secret: The secret of the peer that authenticates to peer. 3. Local secret: The local secret that authenticates peer. Press Enter to start setting up shared secrets > Enter WWN, Domain, or switch name (Leave blank when done): 10:20:30:40:50:60:70:80 Enter peer secret: Re-enter peer secret: Enter local secret: Re-enter local secret: Enter WWN, Domain, or switch name (Leave blank when done): 10:20:30:40:50:60:70:81 Enter peer secret: Re-enter peer secret: Enter local secret: Re-enter local secret: Enter WWN, Domain, or switch name (Leave blank when done): Are you done? (yes, y, no, n): [no] y Saving data to key store... Done. 3. Disable and enable the ports on a peer switch using the portDisable and portEnable commands. Fabric-wide distribution of the AUTH policy The AUTH policy can be manually distributed to the fabric using the distribute command; there is no support for automatic distribution. To distribute the AUTH policy, see "Distributing the local ACL policies" on page 142 for instructions. Accept distributions configuration parameter Local Switch configuration parameters are needed to control whether a switch accepts or rejects distributions of the AUTH policy using the distribute command and whether the switch may initiate distribution of the policy. To set the local switch configuration parameter, see "Policy database distribution" on page 139. 134 Configuring advanced security features