HP StorageWorks SN6000, Command Line Interface Manual

Page: 87 / 330

HP StorageWorks SN6000 Fibre Channel Switch Command Line Interface Guide 87
8 Device Security Configuration
Device security provides for the authorization and authentication of devices that you attach to a switch. You
can configure a switch with a group of devices against which the switch authorizes new attachments by
devices, other switches, or devices issuing management server commands.
Device security is defined through the use of security sets and groups. A group is a list of device WWNs
that are authorized to attach to a switch. There are three types of groups: one for other switches (ISL),
another for devices (port), and a third for devices that issue management server commands (MS). A
security set is a set of up to three groups with no more than one of each group type. The security database
is made up of all security sets on the switch.
In addition to providing authorization, the switch can be configured to require authentication to validate
the identity of the connecting switch, device, or host. Authentication can be performed locally using the
switch’s security database, or remotely using a RADIUS server such as Microsoft RADIUS.
Displaying security database information
You can display the following information about the security database:
• Configured security set information , page 87
• Active security set information , page 88
• Security set membership information , page 89
• Group membership information , page 89
• Security database modification history , page 90
• Security database limits , page 90
Configured security set information
The
securityset list
and the
security list
commands display information about all security
sets in the security database.
To display a list of the security sets, enter the
securityset list
command, as shown in the following
example:
SN6000 FC Switch #> securityset list
Current list of SecuritySets
----------------------------
alpha
beta