HP Fabric OS v7.0.1, Руководство администратора

Страница: 353 / 584

Fabric OS Administrator’s Guide 315
53-1002446-01
Configuring encryption and compression
14
3. Enter the authUtil command to set the switch policy mode to Active or On:
authutil --policy -sw active
or:
authutil --policy -sw on
4. Enable the DH-CHAP authentication protocol:
authutil --set -a dhchap
or:
authutil --set -a all
5. Enable authentication with DH group 4 or “*”:
authutil --set -g 4
DH Group was set to 4.
or
authutil --set -g "*"
DH Group was set to 0,1,2,3,4.
For additional information about establishing DH-CHAP secrets, see “Secret key pairs for DH-CHAP”
on page 149.
For additional information about configuring DH-CHAP authentication for E_Ports, see
“Authentication policy for fabric elements” on page 143.
Configuring encryption
NOTE
Before performing this procedure, you must authenticate the port as described in “Configuring and
enabling authentication” on page 314. It is also recommended that you check for port availability
using the portEncCompShow command. See “Viewing the encryption and compression
configuration” on page 313 for details.
To configure encryption on a port, follow these steps:
1. Connect to the switch and log in using an account with secure admin permissions, or an
account with OM permissions for the EncryptionConfiguration RBAC class of commands.
2. Disable the port on which you want to configure encryption. Use the portDisable command.
3. Enter the portCfgEncrypt
--
enable command.
This example enables encryption on port 21 on a Brocade 6510 switch:
portcfgencrypt --enable 21
This example enables encryption on port 15 of an FC16-32 blade in slot 9 of an enterprise
class platform:
portcfgencrypt --enable 9/15
4. Enable the port with the portEnable command.
After manually enabling the port, the new configuration becomes active.