HP StorageWorks 8/20q HP StorageWorks 8/20q Fibre Channel Switch command line - Page 91
Device security configuration, Displaying security database information
View all HP StorageWorks 8/20q manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 91 highlights
8 Device security configuration This section describes the following tasks: • Displaying security database information, page 91 • Configuring the security database, page 95 • Modifying the security database, page 96 • Resetting the security database, page 96 • Managing security sets, page 96 • Managing groups, page 97 Device security provides for the authorization and authentication of devices that you attach to a switch. You can configure a switch with a group of devices against which the switch authorizes new attachments by devices, other switches, or devices issuing management server commands. Device security is defined through the use of security sets and groups. A group is a list of device WWNs that are authorized to attach to a switch. There are three types of groups: one for other switches (ISL), another for devices (port), and a third for devices that issue management server commands (MS). A security set is a set of up to three groups with no more than one of each group type. The security database is made up of all security sets on the switch. In addition to providing authorization, the switch can be configured to require authentication to validate the identity of the connecting switch, device, or host. Authentication can be performed locally using the switch's security database, or remotely using a RADIUS server such as Microsoft RADIUS. Displaying security database information You can display the following information about the security database: • Configured security set information, page 91 • Active security set information, page 92 • Security set membership information, page 93 • Group membership information, page 93 • Security database modification history, page 94 • Security database limits, page 94 Configured security set information The securityset list and the security list commands display information about all security sets in the security database. To display a list of the security sets, enter the securityset list command, as shown in the following example: 8/20q FC Switch #> securityset list Current list of SecuritySets alpha beta 8/20q Fibre Channel Switch command line interface guide 91