Chapter 36 Configuring Fc-Sp And Dhchap - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

DHCHAP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
The terms FC-SP and DHCHAP are used interchangeably in this chapter.
Note
DHCHAP is a mandatory password-based, key-exchange authentication protocol that supports both
switch-to-switch and host-to-switch authentication. DHCHAP negotiates hash algorithms and DH
groups before performing authentication. It supports MD5 and SHA-1 algorithm-based authentication.
Configuring the DHCHAP feature requires the ENTERPRISE_PKG license (see
and Installing
To configure DHCHAP authentication using the local password database, follow these steps:
Enable DHCHAP.
Step 1
Identify and configure the DHCHAP authentication modes.
Step 2
Configure the hash algorithm and DH group.
Step 3
Configure the DHCHAP password for the local switch and other switches in the fabric.
Step 4
Configure the DHCHAP timeout value for reauthentication.
Step 5
Verify the DHCHAP configuration.
Step 6
This section includes the following topics:
DHCHAP Compatibility with Existing Cisco MDS Features, page 36-3
•
About Enabling DHCHAP, page 36-3
•
Enabling DHCHAP, page 36-3
•
About DHCHAP Authentication Modes, page 36-4
•
Configuring the DHCHAP Mode, page 36-4
•
About the DHCHAP Hash Algorithm, page 36-5
•
Configuring the DHCHAP Hash Algorithm, page 36-5
•
About the DHCHAP Group Settings, page 36-6
•
Configuring the DHCHAP Group Settings, page 36-6
•
About the DHCHAP Password, page 36-6
•
Configuring DHCHAP Passwords for the Local Switch, page 36-7
•
• About Password Configuration for Remote Devices, page 36-7
• Configuring DHCHAP Passwords for Remote Devices, page 36-8
About the DHCHAP Timeout Value, page 36-8
•
Configuring the DHCHAP Timeout Value, page 36-8
•
Configuring DHCHAP AAA Authentication, page 36-8
•
Displaying Protocol Security Information, page 36-9
•
Cisco MDS 9000 Family CLI Configuration Guide
36-2
Licenses").
Chapter 36 Configuring FC-SP and DHCHAP
Chapter 3, "Obtaining
OL-16184-01, Cisco MDS SAN-OS Release 3.x