HP StorageWorks 8/20q HP StorageWorks 8/20q Fibre Channel Switch event message - Page 30

The Challenge Handshake, Exchange Fabric Membership

Page 30 highlights

Table 4 Alarm events and recommended action (Continued) Icon Event ID and message Description Action (A1007.000A) (Security: Dropping lock held by domain domain_id for number seconds) (A1007.000B) (Security: EFMD Rejected, bad revision) A remote switch has held the fabric lock for too long. The local switch is dropping the lock in order to send out an Exchange Fabric Membership Data (EFMD) frame. None The remote switch is running at a different Exchange Fabric Membership Data (EFMD) version level than the local switch. Ports will isolate. None (A1007.000C) (Security policy restrict mode, security db differs) The current security policy calls for Restrict mode, which means that all switches in the fabric must have the same security databases or the Fabric inter-switch links (ISL)s will not log in. In this case, the security databases differ. Reconfigure the active security set so that the ISL group members are the same. (A1007.000D) (Security policy in mode mode, other switch in mode mode, sec db conflict) (A1007.000E) (Security: Auth challenge received from WWN port_WWN, not Authorized to join) The security policy on the local switch differs from that of the remote switch. Configure the security policy on the remote switch to match that of the local switch. A challenge authentication frame was received from a remote switch, but the local switch does not have an entry for itself within the active security set ISL group. Edit the ISL group to include the local switch. (A1007.000F) (Security: Chap session Gen Response indicates error, chap unable to authenticate) (A1007.0010) (Security: Chap session Receive Challenge indicates bad state, chap unable to authenticate) An Authentication Response frame cannot be built because the Challenge Handshake Authentication Protocol (CHAP) session is not in the right state. The port will isolate. The Challenge Handshake Authentication Protocol (CHAP) session is not in the correct state for a Challenge message. Port will isolate. Check the remote device for a possible error condition. Reset the port to retry again. If errors continue, disable CHAP for this device if it belongs in the fabric. Check the remote device for a possible error condition. Reset the port to retry again. If errors continue, disable CHAP for this device if the device belongs in the fabric. (A1007.0011) (Chap failure, isolating with Invalid Attach) Frame does not match format for a Challenge Handshake Authentication Protocol (CHAP) status frame. Ports will isolate. Check the remote device for a possible error condition. Reset the port to retry again. If errors continue, disable CHAP for this device if the device belongs in the fabric. 30

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52

30
(A1007.000A) (Security:
Dropping lock held by
domain
domain_id
for
number
seconds)
A remote switch has held the
fabric lock for too long. The
local switch is dropping the
lock in order to send out an
Exchange Fabric Membership
Data (EFMD) frame.
None
(A1007.000B) (Security:
EFMD Rejected, bad
revision)
The remote switch is running
at a different Exchange
Fabric Membership Data
(EFMD) version level than the
local switch. Ports will isolate.
None
(A1007.000C) (Security
policy restrict mode,
security db differs)
The current security policy
calls for Restrict mode, which
means that all switches in the
fabric must have the same
security databases or the
Fabric inter-switch links (ISL)s
will not log in. In this case,
the security databases differ.
Reconfigure the active
security set so that the ISL
group members are the same.
(A1007.000D) (Security
policy in
mode
mode,
other switch in
mode
mode, sec db conflict)
The security policy on the
local switch differs from that
of the remote switch.
Configure the security policy
on the remote switch to match
that of the local switch.
(A1007.000E) (Security:
Auth challenge received
from WWN
port_WWN
, not
Authorized to join)
A challenge authentication
frame was received from a
remote switch, but the local
switch does not have an entry
for itself within the active
security set ISL group.
Edit the ISL group to include
the local switch.
(A1007.000F) (Security:
Chap session Gen
Response indicates
error, chap unable to
authenticate)
An Authentication Response
frame cannot be built
because the Challenge
Handshake Authentication
Protocol (CHAP) session is
not in the right state. The port
will isolate.
Check the remote device for a
possible error condition.
Reset the port to retry again.
If errors continue, disable
CHAP for this device if it
belongs in the fabric.
(A1007.0010) (Security:
Chap session Receive
Challenge indicates bad
state, chap unable to
authenticate)
The Challenge Handshake
Authentication Protocol
(CHAP) session is not in the
correct state for a Challenge
message. Port will isolate.
Check the remote device for a
possible error condition.
Reset the port to retry again.
If errors continue, disable
CHAP for this device if the
device belongs in the fabric.
(A1007.0011) (Chap
failure, isolating with
Invalid Attach)
Frame does not match format
for a Challenge Handshake
Authentication Protocol
(CHAP) status frame. Ports
will isolate.
Check the remote device for a
possible error condition.
Reset the port to retry again.
If errors continue, disable
CHAP for this device if the
device belongs in the fabric.
Table 4
Alarm events and recommended action (Continued)
Icon
Event ID and message
Description
Action