IBM SAN768B-2, Installation, Service And User Manual

Page: 39 / 186

v Syslog auditing
v
RCS (Reliable Commit Service)
v NTP
v
Tasks to manage address assignment, routing, link initialization, fabric
initialization, link shutdown, chassis shutdown, and the user interface.
Security
The list below highlights some of the key security features available for the
SAN384B-2 and for other switches running Fabric OS 7.0 or later.
v
DH-CHAP
v SSHv2 (using AES, 3DES, RSA)
v
HTTPS (using AES)
v SNPMv3
v
FC-SP
v Secure RPC
v
Secure file copy (SCP)
v Telnet disable
v
Telnet timeout
v IP filters (block listeners)
v
Secure passwords (centralized control through RADIUS/CHAP)
v
Multiple user accounts (MUAs). Up to 255.
v Role-based access controls (RBACs)
v
Administrative domains/Virtual fabrics
v Boot PROM password reset
v
Password hardening policies
v Upfront login in Web Tools
v
Login banner
v Monitoring of attempted security breaches (through audit logging)
v
Monitoring of attempted security breaches (through Fabric Watch Security Class)
v Fibre Channel security policies: DCC and SCC
v Trusted Switch (FCS) for central security management
v
Management access controls (SNMPv3, Telnet, FTP, serial port, front panel)
v Hardware-enforced zoning by WWN, domain/port ID, or both
v
Default zoning
v RSCN suppression and aggregation
v
Configurable RSCN suppression by port
v NTPv3 (to synchronize timestamps)
v
Event auditing
v Change tracking
v
Firmware change alerts in Fabric Manager
v
Persistent port disable
v Persistent domain ID
v
E_Port disable
Chapter 1. Introduction
9