Home » HP Manuals » Storage Devices » HP StorageWorks SN6000 » Manual Viewer

HP StorageWorks SN6000 HP StorageWorks 8/20q Fibre Channel Switch command line - Page 85

Connection security configuration, Managing SSL and SSH services

View all HP StorageWorks SN6000 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 85 highlights

7 Connection security configuration This section describes the following tasks: • Managing SSL and SSH services, page 85 • Displaying SSL and SSH services, page 86 • Creating an SSL security certificate, page 87 The 8/20q Fibre Channel Switch supports secure connections with Telnet and switch management applications. The Secure Shell protocol (SSH) secures Telnet connections to the switch. The Secure Sockets Layer (SSL) protocol secures switch connections to the following management applications: • Simple SAN Connection Manager • QuickTools • Storage Management Initiative-Specification (SMI-S) Managing SSL and SSH services Consider the following when enabling SSH and SSL services: • Simple SAN Connection Manager version 1.0 does not support the SSL service. If SSL is enabled, you will be unable to manage the switch using this version of Simple SAN Connection Manager. • To establish a secure Telnet connection, your workstation must use an SSH client. • To enable secure SSL connections, you must first synchronize the date and time on the switch and workstation. See "Managing the date and time" on page 51. • The SSL service must be enabled to authenticate users through a Remote Authentication Dial-In Service (RADIUS) server. See "Configuring a RADIUS server on the switch" on page 100. • To disable SSL when using a user authentication RADIUS server, the RADIUS server authentication order must be local. • Enabling SSL automatically creates a security certificate on the switch. 8/20q Fibre Channel Switch command line interface guide 85

Section	Page
Contents	3
About this guide	11
Intended audience	11
Related documentation	11
Document conventions and symbols	12
Table 1 Document conventions	12
HP technical support	13
Product warranties	13
Subscription service	13
HP web sites	13
Documentation feedback	13
Command line interface usage	15
Logging in to the switch through Telnet	15
Opening and closing an admin session	16
Entering commands	16
Table 2 Command-line completion	16
Getting help	17
Setting page breaks	17
Creating a support file	17
Downloading and uploading files	19
User account configuration	21
Table 3 Factory user accounts	21
Displaying user account information	21
Creating user accounts	22
Modifying user accounts and passwords	22
Network configuration	25
Displaying the network configuration	25
Configuring the Ethernet port	26
IPv4 configuration	26
IPv6 configuration	27
DNS server configuration	28
Verifying a switch in the network	28
Managing IP security	29
IP security concepts	29
Uses of security policies	29
Applying IP security	30
Displaying IP security information	30
Policy and association information	30
IP security configuration history	31
IP security configuration limits	31
Managing the security policy database	31
Creating a policy	32
Deleting a policy	32
Modifying a user-defined policy	33
Renaming a user-defined policy	34
Copying a policy	34
Managing the security association database	34
Creating an association	35
Deleting an association	35
Modifying a user-defined association	36
Renaming a user-defined association	37
Copying an association	37
Resetting the IP security configuration	37
Switch configuration	39
Displaying switch information	39
Name server information	40
Switch operational information	41
System process information	42
Elapsed time between resets	42
Configuration information	42
Switch configuration parameters	43
Zoning configuration parameters	43
Security configuration parameters	44
Hardware information	45
Table 4 Heartbeat LED activity	45
Firmware information	45
Managing switch services	46
Managing switch configurations	48
Displaying a list of switch configurations	48
Activating a switch configuration	48
Copying a switch configuration	48
Deleting a switch configuration	48
Modifying a switch configuration	49
Backing up and restoring a switch configuration	50
Creating the backup file	50
Downloading the configuration file	50
Restoring the configuration file	50
Paging a switch	51
Managing the date and time	51
Displaying the date and time	51
Setting the date and time explicitly	52
Setting the time through an NTP server	53
Resetting a switch	53
Table 5 Switch reset methods	53
Installing firmware	54
Non-disruptive activation	54
One-step firmware installation	55
Custom firmware installation	56
Testing a switch	56
Online tests for switches	57
Offline tests for switches	57
Connectivity tests for switches	57
Displaying switch test status	58
Canceling a switch test	58
Managing switch feature upgrades	59
Displaying feature licenses	59
Installing a feature license key	59
Managing idle session timers	59
Port configuration	61
Displaying port information	61
Port configuration parameters	61
Port operational information	62
Port threshold alarm configuration parameters	63
Port performance	64
Modifying port operating characteristics	65
Port binding	66
Resetting a port	67
Configuring port threshold alarms	67
Testing a port	69
Online tests for ports	69
Offline tests for ports	70
Displaying port test results	70
Canceling a port test	70
Zoning configuration	71
Displaying zoning database information	71
Configured zone set information	72
Active zone set information	73
Merged zone set information	74
Edited zone set information	74
Zone set membership information	74
Zone membership information	75
Orphan zone information	75
Alias and alias membership information	76
Zoning modification history	76
Zoning database limits	77
Configuring the zoning database	77
Modifying the zoning database	79
Saving the active and merged zone sets	79
Resetting the zoning database	80
Deleting inactive zone sets, zones, and aliases	80
Managing zone sets	80
Creating a zone set	80
Deleting a zone set	80
Renaming a zone set	81
Copying a zone set	81
Adding zones to a zone set	81
Removing zones from a zone set	81
Activating a zone set	81
Deactivating a zone set	81
Managing zones	81
Creating a zone	82
Deleting a zone	82
Renaming a zone	82
Copying a zone	82
Adding members to a zone	82
Removing members from a zone	82
Managing aliases	83
Creating an alias	83
Deleting an alias	83
Renaming an alias	83
Copying an alias	83
Adding members to an alias	83
Removing members from an alias	84
Connection security configuration	85
Managing SSL and SSH services	85
Displaying SSL and SSH services	86
Creating an SSL security certificate	87
Device security configuration	89
Displaying security database information	89
Configured security set information	89
Active security set information	90
Security set membership information	91
Group membership information	91
Security database modification history	92
Security database limits	92
Configuring the security database	93
Modifying the security database	94
Resetting the security database	94
Managing security sets	94
Creating a security set	94
Deleting a security set	95
Renaming a security set	95
Copying a security set	95
Adding groups to a security set	95
Removing groups from a security set	95
Activating a security set	95
Deactivating a security set	95
Managing groups	95
Creating a group	96
Deleting a group	96
Renaming a group	96
Copying a group	96
Adding members to a group	96
Modifying a group member	97
Removing members from a group	97
RADIUS server configuration	99
Displaying RADIUS server information	99
Configuring a RADIUS server on the switch	100
Event log configuration	103
Starting and stopping event logging	103
Displaying the event log	104
Table 6 Event log message format	104
Filtering the event log display	105
Controlling messages in the output stream	105
Managing the event log configuration	105
Configuring the event log	105
Displaying the event log configuration	106
Restoring the event log configuration	106
Clearing the event log	106
Logging to a remote host	106
Creating and downloading a log file	107
Call Home configuration	109
Call Home concepts	109
Call Home requirements	109
Call Home messages	110
Technical support interface	111
Configuring the Call Home service	112
Managing the Call Home database	113
Displaying Call Home database information	114
Creating a profile	116
Deleting a profile	116
Modifying a profile	117
Renaming a profile	117
Copying a profile	117
Adding a data capture configuration	118
Modifying a data capture configuration	118
Deleting a data capture configuration	119
Testing a Call Home profile	119
Changing Simple Mail Transfer Protocol servers	119
Clearing the Call Home message queue	119
Resetting the Call Home database	120
Simple Network Management Protocol configuration	121
Managing the SNMP service	121
Displaying SNMP information	122
Modifying the SNMP configuration	123
Resetting the SNMP configuration	124
Managing the SNMP version 3 configuration	125
Creating an SNMP version 3 user account	126
Displaying SNMP version 3 user accounts	126
Modifying an SNMP version 3 user account	127
Command reference	129
Access authority	129
Syntax and operands	129
Notes and examples	129
admin	130
alias	131
callhome	133
Table 7 Call Home queue statistics parameters	134
capture	136
Table 8 Data capture configuration parameters	136
config	139
create	142
date	144
exit	145
feature	146
firmware install	147
group	149
Table 9 ISL group member attributes	149
Table 10 Port group member attributes	150
Table 11 MS group member attributes	150
Table 12 Group type parameters	151
Table 13 Group member attributes	151
hardreset	155
help	156
history	157
hotreset	158
image	159
ipsec	161
ipsec association	163
Table 14 Association configuration parameters	163
ipsec list	166
ipsec policy	169
Table 15 Policy configuration parameters	169
lip	172
logout	173
passwd	174
ping	175
profile	176
Table 16 Profile configuration parameters	176
ps	179
quit	180
reset	181
Table 17 Call Home service configuration defaults	183
Table 18 Switch configuration defaults	184
Table 19 Port configuration defaults	184
Table 20 Port threshold alarm configuration defaults	185
Table 21 Zoning configuration defaults	185
Table 22 SNMP configuration defaults	185
Table 23 RADIUS configuration defaults	186
Table 24 Switch services configuration defaults	186
Table 25 DNS host name configuration defaults	187
Table 26 IPv4 Ethernet configuration defaults	187
Table 27 IPv6 Ethernet configuration defaults	187
Table 28 Event logging configuration defaults	187
Table 29 NTP server configuration defaults	188
Table 30 Timer configuration defaults	188
Table 31 Security configuration defaults	188
security	189
securityset	192
set alarm	194
Table 32 Output stream alarm parameters	194
set beacon	195
Table 33 Beacon state parameters	195
set config port	196
Table 34 Port configuration parameters	196
set config security	199
Table 35 Security configuration parameters	199
set config security portbinding	200
Table 36 Port binding configuration parameters	200
set config switch	201
Table 37 Switch configuration parameters	201
set config threshold	203
Table 38 Port alarm threshold parameters	203
set config zoning	205
Table 39 Zoning configuration parameters	205
set log	206
Table 40 Component event monitoring filter parameters	206
Table 41 Event display filter parameters	207
Table 42 Severity level monitoring parameters	207
Table 43 Port monitoring parameters	207
set pagebreak	209
Table 44 Pagebreak state parameters	209
set port	210
Table 45 Transmission speed parameters	210
Table 46 Port administrative state parameters	210
set setup callhome	211
Table 47 Call Home service configuration attributes	211
set setup radius	213
Table 48 Common RADIUS server configuration attributes	213
Table 49 Server-specific RADIUS server configuration attributes	213
set setup services	216
Table 50 Switch services settings	216
set setup snmp	219
Table 51 Common SNMP configuration parameters	219
Table 52 SNMP trap configuration parameters	220
set setup system	222
Table 53 DNS host name configuration parameters	222
Table 54 IPv4 Ethernet configuration parameters	223
Table 55 IPv6 Ethernet configuration parameters	223
Table 56 Event logging configuration parameters	224
Table 57 NTP server configuration parameters	224
Table 58 Timer configuration parameters	225
set switch state	229
Table 59 Switch administrative state parameters	229
set timezone	230
show about	231
Table 60 Show about display entries	231
show alarm	233
show broadcast	234
show chassis	235
show config port	236
show config security	237
show config security portbinding	238
show config switch	239
show config threshold	240
show config zoning	241
show domains	242
show donor	243
show fabric	244
show fdmi	245
show interface	246
show log	247
Table 61 Log monitoring components	247
Table 62 Event log display filter parameters	248
show lsdb	250
show mem	251
show ns	252
Table 63 Name server display parameters	252
show pagebreak	253
show perf	254
show port	256
Table 64 Show port display entries	256
show postlog	260
show setup callhome	261
show setup mfg	262
show setup radius	263
show setup services	264
show setup snmp	265
show setup system	266
show steering	268
show switch	269
Table 65 Switch operational parameters	269
show system	271
show testlog	272
show timezone	273
show topology	274
show users	275
show version	276
Table 66 Show version display entries	276
shutdown	278
snmpv3user	279
Table 67 SNMP version 3 user account parameters	279
test cancel	282
test port	283
Table 68 Offline port loopback types	283
Table 69 Port test parameters	283
test status	285
test switch	287
Table 70 Connectivity loopback types	287
Table 71 Offline loopback types	287
Table 72 Switch test parameters	287
uptime	289
user	290
whoami	292
zone	293
zoneset	296
zoning active	298
zoning cancel	299
zoning clear	300
zoning configured	301
zoning delete orphans	302
zoning edit	303
Table 73 Zoning database parameters	303
zoning edited	304
zoning history	305
zoning limits	306
Table 74 Zoning database limits	306
zoning list	307
zoning merged	308
zoning restore	309
zoning save	310