Configuring DHCHAP Passwords for Remote Devices
You can locally configure the remote DHCHAP password for another switch in the fabric.
Procedure
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 1
Configures a password for another switch
in the fabric that is identified by the switch
WWN device name.
fcsp dhchap devicename switch-wwn password
password
Example:
switch(config)# fcsp dhchap devicename
21:00:05:30:23:1a:11:03 password mypassword
Step 2
Removes the password entry for this
switch from the local authentication
database.
switch(config)#
no fcsp dhchap devicename
switch-wwn password password
Example:
switch(config)# no fcsp dhchap devicename
21:00:05:30:23:1a:11:03 password mypassword
Step 3
DHCHAP Timeout Value
During the DHCHAP protocol exchange, if the switch does not receive the expected DHCHAP message
within a specified time interval, authentication failure is assumed. The time ranges from 20 (no authentication
is performed) to 1000 seconds. The default is 30 seconds.
When changing the timeout value, consider the following factors:
•
The existing RADIUS and timeout values.
•
The same value must also be configured on all switches in the fabric.
Configuring the DHCHAP Timeout Value
You can configure the DHCHAP timeout value.
Cisco Nexus 5500 Series NX-OS SAN Switching Configuration Guide, Release 7.x
OL-30895-01
239
Configuring FC-SP and DHCHAP
Configuring DHCHAP Authentication