Default Fabric Security Settings - Cisco Nexus 5000 Series Configuration Manual

Default Fabric Security Settings

Example:
switch(config)# fcsp dhchap devicename 20:00:00:05:30:00:38:5e password rtp9509
Step 5 Enable the DHCHAP mode for the required Fibre Channel interface.
Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is performed.
Note
Example:
switch(config)# interface fc2/4
switch(config-if)# fcsp on
Step 6 Verify the protocol security information configured in this switch by displaying the DHCHAP local password database.
Example:
switch# show fcsp dhchap database
DHCHAP Local Password:
Non-device specific password:*******
Other Devices' Passwords:
Password for device with WWN:20:00:00:05:30:00:38:5e is *******
Step 7 Display the DHCHAP configuration in the Fibre Channel interface.
Example:
switch# show fcsp interface fc2/4
fc2/4
fcsp authentication mode:SEC_MODE_ON
Status:Successfully authenticated
Step 8 Repeat these steps on the connecting MDS 9509 switch.
Example:
MDS-9509# show wwn switch
Switch WWN is 20:00:00:05:30:00:38:5e
MDS-9509(config)# fcsp enable
MDS-9509(config)# fcsp dhchap password rtp9509
MDS-9509(config)# fcsp dhchap devicename 20:00:00:05:30:00:54:de password rtp9216
MDS-9509(config)# interface fc 4/5
MDS-9509(config-if)# fcsp on
MDS-9509# show fcsp dhchap database
DHCHAP Local Password:
Non-device specific password:*******
Other Devices' Passwords:
Password for device with WWN:20:00:00:05:30:00:54:de is *******
MDS-9509# show fcsp interface fc2/4
Fc2/4
fcsp authentication mode:SEC_MODE_ON
Status:Successfully authenticated
You have now enabled and configured DHCHAP authentication for the sample setup in shown in the figure above.
Default Fabric Security Settings
The following table lists the default settings for all fabric security features in any switch.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide
210
Configuring FC-SP and DHCHAP
OL-xxxxx-xx