HP Fabric OS v7.0.1, Руководство администратора

Страница: 351 / 584

Fabric OS Administrator’s Guide 313
53-1002446-01
Configuring encryption and compression
14
These steps summarize how to enable encryption or compression on a port:
1. Use the portEncCompShow command to determine which ports are available for encryption or
compression.
2. If you are enabling encryption on the port, configure port level authentication for the port using
the secAuthSecret and authUtil commands. Omit this step if you want to enable only
compression on the port.
3. Use the portCfgEncrypt command to enable encryption on the port. This step fails if you try to
exceed the number of allowable ports available for encryption or compression on the ASIC.
4. Use the portCfgCompress command to enable compression on the port. This step fails if you
try to exceed the number of allowable ports available for encryption or compression on the
ASIC.
Following successful port initialization, the configured features are enabled and active. You can use
the islShow command to check that the E_Port has come online with encryption or compression
enabled.
If port initialization is not successful, you can check for port segmentation errors with the
switchShow command. This command will tell you if the segmentation was due to mismatched
encryption or compression configurations on the ports at either end of the ISL, if port-level
authentication failed, or if a required resource was not available.
The following topics provide step-by-step instructions for performing encryption and compression
tasks:
•
“Viewing the encryption and compression configuration” on page 313
•
“Configuring and enabling authentication” on page 314
•
“Configuring encryption” on page 315
•
“Configuring compression” on page 316
Viewing the encryption and compression configuration
To determine which ports are available for encryption or compression on each ASIC on the switch,
follow these steps:
1. Connect to the switch and log in using an account with admin permissions.
2. Enter the portEncCompShow command.
The following example shows the output for two ASICs. ASIC 1 (below the line of dashes)
already has compression configured and active on user ports 348 and 349. Given the limit of
two ports per ASIC, ASIC 1 has no more ports available for encryption or compression. ASIC 0
(above the dashed line) has no ports configured for either encryption or compression and
therefore has any two ports available for this purpose. For bladed switches, use the
switchShow command to determine the slot number of a specific user port.
sw0:FID128:root> portenccompshow
User Encryption Compression
Port configured Active configured Active
---- ---------- -------
---------- -----------
17 No No No No
18 No No No No
19 No No No No
20 No No No No
21 No No No No