IBM SAN32M-2, Installation And Service Manual

Page: 112 / 312

SAN32M-2 Installation and Service Manual 86
Configure security
This section describes optional product security features configured
through the SAN management or Element Manager applications. The
enhanced SANtegrity PFE key must be installed. Refer to
Install PFE
keys (optional) for instructions. Features include:
• SANtegrity authentication - Select SANtegrity Authentication
from the Configure menu at the Element Manager application. The
SANtegrity Authentication dialog box provides five pages (tabs) to
configure optional authentication features, including:
— Users - Configure password-protected administrator and
operator access to the SAN management and Element
Manager applications.
— Software - Configure CHAP-controlled management interface
access (out-of-band and inband) to the product.
— Devices - Configure a CHAP secret authentication sequence
for nodes (devices) attached to the product through E_Ports or
N_ports.
— IP Access Control - Configure a list of device IP addresses or a
range of device IP addresses authorized to communicate with
the product.
— RADIUS Servers - Configure RADIUS servers. A RADIUS
server stores and authenticates passwords and CHAP secrets.
•
Enterprise Fabric Mode -
Use the Enterprise Fabric Mode option
from the Configure menu (SAN management application) to
enable or disable EFM. Fabric binding is activated when EFM is
enabled.
• Fabric binding - Use the Fabric Binding from the Configure option
from the Configure menu (SAN management application) to lock
parameters of a fabric in accordance with the user configuration.
Fabric binding creates a membership list of element (director or
switch) Domain_IDs and WWNs that can communicate with the
product.
• Switch binding - Use the Switch Binding option from the
Configure menu (Element Manager application) to create a
membership list of node (device) WWNs that can attach to the
product. The specified connection policy restricts product access
through E_Ports, F_Ports, or in general (all ports).