HP Fabric OS 7.1.0, Administrator'S Manual

Page: 415 / 666

Fabric OS Administrator’s Guide 415
53-1002745-02
Working with EX_Ports
14
FCR:admin> portcfgexport 1
Port 1 info
Admin: enabled
State: OK
Pid format: core(N)
Operate mode: Brocade Native
Edge Fabric ID: 20
Front Domain ID: 160
Front WWN: 50:00:53:31:37:43:ee:14
Principal Switch: 8
Principal WWN: 10:00:00:05:33:13:70:3e
Fabric Parameters: Auto Negotiate
R_A_TOV: 10000(N)
E_D_TOV: 2000(N)
Authentication Type: None
DH Group: N/A
Hash Algorithm: N/A
Encryption: OFF
Compression: OFF
Forward Error Correction: OFF
Edge fabric's primary wwn: N/A
Edge fabric's version stamp: N/A
Example Configuring the ‘edge’ switch to use DH-CHAP protocol for authentication, setting the DH group to
group 4, and activating switch authentication
edge:admin> authutil --show
AUTH TYPE HASH TYPE GROUP TYPE
----------------------------------------
fcap,dhchap sha1,md5 0,1,2,3,4
Switch Authentication Policy: PASSIVE
Device Authentication Policy: OFF
edge:admin>
authutil --set -a dhchap
edge:admin> authutil --set -g 4
edge:admin> authutil --policy -sw active
Warning: Activating the authentication policy requires either DH-CHAP secrets or
PKI certificates depending on the protocol selected. Otherwise, ISLs will be
segmented during next E-port bring-up.
ARE YOU SURE (yes, y, no, n): [no]
y
Auth Policy is set to ON
edge:admin>
edge:admin>
authutil --show
AUTH TYPE HASH TYPE GROUP TYPE
--------------------------------------
dhchap md5 4
Switch Authentication Policy: ON
Device Authentication Policy: OFF
edge:admin>
Example Setting a secret key
NOTE
For this you need the WWN of the front phantom switch. Use portCfgExPort EX_Port# on that switch
to learn its wwn value.
edge:admin> secauthsecret --set
This command is used to set up secret keys for the DH-CHAP authentication.
The minimum length of a secret key is 8 characters and maximum 40