Default Fabric Security Settings - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Default Fabric Security Settings

Example:
switch# show fcsp dhchap database
DHCHAP Local Password:
Other Devices' Passwords:
Step 7 Display the DHCHAP configuration in the Fibre Channel interface.
Example:
switch# show fcsp interface fc2/4
fc2/4
Step 8 Repeat these steps on the connecting MDS 9509 switch.
Example:
MDS-9509# show wwn switch
Switch WWN is 20:00:00:05:30:00:38:5e
MDS-9509(config)# fcsp enable
MDS-9509(config)# fcsp dhchap password rtp9509
MDS-9509(config)# fcsp dhchap devicename 20:00:00:05:30:00:54:de password rtp9216
MDS-9509(config)# interface fc 4/5
MDS-9509(config-if)# fcsp on
MDS-9509# show fcsp dhchap database
DHCHAP Local Password:
Other Devices' Passwords:
MDS-9509# show fcsp interface fc2/4
Fc2/4
You have now enabled and configured DHCHAP authentication for the sample setup in shown in the figure
above.
Default Fabric Security Settings
The following table lists the default settings for all fabric security features in any switch.
Table 90: Default Fabric Security Settings
Parameters
DHCHAP feature
DHCHAP hash algorithm
DHCHAP authentication mode
DHCHAP group default priority exchange order
DHCHAP timeout value
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
634
Non-device specific password:*******
Password for device with WWN:20:00:00:05:30:00:38:5e is *******
fcsp authentication mode:SEC_MODE_ON
Status:Successfully authenticated
Non-device specific password:*******
Password for device with WWN:20:00:00:05:30:00:54:de is *******
fcsp authentication mode:SEC_MODE_ON
Status:Successfully authenticated
Configuring FC-SP and DHCHAP
Default
Disabled
A priority list of MD5 followed by SHA-1 for
DHCHAP authentication
Auto-passive
0, 4, 1, 2, and 3, respectively
30 seconds
OL-16597-01