Chapter 36
Configuring FC-SP and DHCHAP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
DHCHAP Compatibility with Existing Cisco MDS Features
This sections identifies the impact of configuring the DHCHAP feature along with existing Cisco MDS
features:
•
•
•
•
•
About Enabling DHCHAP
By default, the DHCHAP feature is disabled in all switches in the Cisco MDS 9000 Family.
You must explicitly enable the DHCHAP feature to access the configuration and verification commands
for fabric authentication. When you disable this feature, all related configurations are automatically
discarded.
Enabling DHCHAP
To enable DHCHAP for a Cisco MDS switch, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# fcsp enable
switch(config)# no fcsp enable
OL-16184-01, Cisco MDS SAN-OS Release 3.x
PortChannel interfaces—If DHCHAP is enabled for ports belonging to a PortChannel, DHCHAP
authentication is performed at the physical interface level, not at the PortChannel level.
FCIP interfaces—The DHCHAP protocol works with the FCIP interface just as it would with a
physical interface.
Port security or fabric binding—Fabric binding policies are enforced based on identities
authenticated by DHCHAP.
VSANs—DHCHAP authentication is not done on a per-VSAN basis.
High availability—DHCHAP authentication works transparently with existing HA features.
Purpose
Enters configuration mode.
Enables the DHCHAP in this switch.
Disables (default) the DHCHAP in this switch.
Cisco MDS 9000 Family CLI Configuration Guide
DHCHAP
36-3