S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
36-3
Cisco MDS 9000 Family CLI Configuration Guide
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Chapter 36 Configuring FC-SP and DHCHAP
DHCHAP
DHCHAP Compatibility with Existing Cisco MDS Features
This sections identifies the impact of configuring the DHCHAP feature along with existing Cisco MDS
features:
•
PortChannel interfaces—If DHCHAP is enabled for ports belonging to a PortChannel, DHCHAP
authentication is performed at the physical interface level, not at the PortChannel level.
•
FCIP interfaces—The DHCHAP protocol works with the FCIP interface just as it would with a
physical interface.
•
Port security or fabric binding—Fabric binding policies are enforced based on identities
authenticated by DHCHAP.
•
VSANs—DHCHAP authentication is not done on a per-VSAN basis.
•
High availability—DHCHAP authentication works transparently with existing HA features.
About Enabling DHCHAP
By default, the DHCHAP feature is disabled in all switches in the Cisco MDS 9000 Family.
You must explicitly enable the DHCHAP feature to access the configuration and verification commands
for fabric authentication. When you disable this feature, all related configurations are automatically
discarded.
Enabling DHCHAP
To enable DHCHAP for a Cisco MDS switch, follow these steps:
Command
Purpose
Step 1
switch#
config t
Enters configuration mode.
Step 2
switch(config)#
fcsp enable
Enables the DHCHAP in this switch.
switch(config)#
no
fcsp enable
Disables (default) the DHCHAP in this switch.
