Dell Brocade G620 Brocade 8.0.1 Fabric OS Command Reference - Page 91

authUtil --set option value Modifies the authentication configuration. Valid options and their values include the following: -a fcap | dhchap | all Sets the authentication protocol. Specify "fcap" to set only FCAP authentication. Specify "dhchap" to set only DH-CHAP authentication. Specify "all" to set both FCAP and DH-CHAP, which is the default setting. When authentication is set to "all", the implicit order is FCAP followed by DH-CHAP. This means that in authentication negotiation, FCAP is given priority over DH-CHAP on the local switch. If the negotiation is done for an encrypted port, DHCHAP takes precedence over FCAP. The --set dhchap and --set all options are supported in the AG mode. Before setting the authentication type, make sure that FCAP certificates and dhchap secrets are configured. -g 0 | 1 | 2 | 3 |4 | * Sets the Diffie-Hellman (DH) group. Valid values are 0 to 4 and "*". The DH group 0 is called NULL DH. Each DH group implicitly specifies a key size and associated parameters. A higher group value provides stronger cryptography and a higher level of security. When DH group is set to a specified value, only that DH group is enabled. Specifying "*" enables all DH groups 0, 1, 2, 3, and 4, in that order. This means that in authentication negotiation, the NULL DH group is given priority over all other groups. In the case of a port that is enabled for encryption and you specify "*", the DH group 4 is selected.This option is supported in AG mode. -h sha256 | sha1 | md5 | all Sets the hash type. Valid values are "sha256", "sha1", "md5", or "all". Enabling sha256 access is required when configuring the system for FIPS. Refer to the Fabric OS Administrator's Guide for details on FIPS configuration. --policy Sets the switch authentication policy or device authentication policy. The following options are supported: -sw off | passive | active | on Sets the switch authentication policy. Specify one of the following modes. Operands are exclusive. If the switch has ports enabled for encryption, only the ON and ACTIVE options are supported. Only on and off options are supported in AG mode. off Turns the authentication policy off, and the switch rejects any authentication requests. passive Sets the authentication policy to passive mode (default) . The switch does not initiate authentication but participates in authentication if the connecting switch initiates authentication. active Sets the authentication policy to active mode. During switch initialization, authentication is initiated on all E_Ports, but the port is not disabled if the connecting switch does not support authentication or the authentication policy is turned off. Brocade Fabric OS Command Reference 67 53-1004112-02