Brocade Communications Systems 53-1001763-02, Руководство администратора

Страница: 565 / 586

Fabric OS Administrator’s Guide 525
53-1001763-02
FIPS mode configuration
D
2. Configure the DNS on the switch by using the dnsConfig command.
Example of setting the DNS
switch:admin> dnsconfig
Enter option
1 Display Domain Name Service (DNS) configuration
2 Set DNS configuration
3 Remove DNS configuration
4 Quit
Select an item: (1..4) [4]
2
Enter Domain Name: [] domain.com
Enter Name Server IP address in dot notation: [] 123.123.123.123
Enter Name Server IP address in dot notation: [] 123.123.123.12 4
DNS parameters saved successfully
Enter option
1 Display Domain Name Service (DNS) configuration
2 Set DNS configuration
3 Remove DNS configuration
4 Quit
Select an item: (1..4) [4]
4
Specify the DNS IP address using either IPv4 or IPv6. This is needed for the switch to resolve
the domain name to the IP address because LDAP initiates a TCP session to connect to your
Microsoft Active Directory server. A Fully Qualified Domain Name (FQDN) is needed to validate
the server identity as mentioned in the common name of the server certificate.
3. Set up LDAP according to the instructions in “LDAP configuration and Microsoft Active
Directory” on page 111 in Chapter 5, “Managing User Accounts” .
•
Additional Microsoft Active Directory settings
a. Set the following SCHANNEL settings listed in Table 105 to allow.
To support FIPS-compliant TLS cipher suites on Microsoft’s Active Directory server, allow
the SCHANNEL settings listed in
Table 105 . Refer to www.microsoft.com for instructions on
how to allow the SCHANNEL settings for the ciphers, hashes, key exchange and the TLS
protocol.
b. Enable FIPS algorithm policy on the Microsoft Active Directory. Refer to
www.microsoft.com for instructions.
TABLE 105
Active Directory keys to modify
Key Sub-key
Ciphers 3DES
Hashes SHA1
Key exchange algorithm PKCS
Protocols TLSv1.0