Configuring Standard Security Features; Secure Protocols; Secure Protocol Support; Items Needed To Deploy Secure Protocols - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual
Hp storageworks fabric os 6.x administrator guide (5697-0015, may 2009)
Hide thumbs
Also See for A7533A - Brocade 4Gb SAN Switch Base:
- Administrator's manual (576 pages) ,
- Hardware reference manual (256 pages) ,
- User manual (248 pages)
Table of Contents
Advertisement
3
Configuring standard security features
This chapter provides information and procedures for configuring standard Fabric OS security features such
as protocol and certificate management.
IMPORTANT:
Secure protocols
Fabric OS supports the secure protocols shown in
Table 15
Secure protocol support
Protocol
SSL
HTTPS
Secure File Copy (scp)
SNMPv3
Simple Network Management Protocol (SNMP) is a standard method for monitoring and managing
network devices. Using SNMP components, you can program tools to view, browse, and manipulate switch
variables and set up enterprise-level management processes.
Every switch carries an SNMP agent and Management Information Base (MIB). The agent accesses MIB
information about a device and makes it available to a network manager station. You can manipulate
information of your choice by trapping MIB elements using the Fabric OS CLI, Web Tools, or Fabric
Manager.
The SNMP Access Control List (ACL) provides a way for the administrator to restrict SNMP get and set
operations to certain hosts and IP addresses. This is used for enhanced management security in the storage
area network.
For details on Brocade MIB files, naming conventions, loading instructions, and information about using
Brocade's SNMP agent, see the Fabric OS MIB Reference.
Table 16
describes additional software or certificates that you must obtain to deploy secure protocols.
Table 16
Items needed to deploy secure protocols
Protocol
SSH
HTTPS
Secure File Copy (scp)
SNMPv1, SNMPv2,
SNMPv3
Secure Fabric OS is no longer supported in Fabric OS 6.x.
Description
Supports SSLv3, 128-bit encryption by default. Fabric OS uses SSL to support
HTTPS. A certificate must be generated and installed on each switch to
enable SSL.
Web Tools supports the use of HTTPS.
Configuration upload and download support the use of scp.
SNMPv1 and v2 are also supported.
Host side
SSH client
No requirement on host
side except a browser that
supports HTTPS
SSH daemon, scp server
None
Table
15.
Switch side
None
Switch IP certificate for SSL
None
None
Fabric OS 6.x administrator guide
85
Advertisement
Table of Contents
Troubleshooting
