Configuring Dhchap Passwords For Remote Devices; About The Dhchap Timeout Value; Configuring The Dhchap Timeout Value; Configuring Dhchap Aaa Authentication - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

DHCHAP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Configuring DHCHAP Passwords for Remote Devices

To locally configure the remote DHCHAP password for another switch in the fabric, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# fcsp dhchap devicename
00:11:22:33:44:aa:bb:cc password NewPassword
switch(config)# no fcsp dhchap devicename
00:11:22:33:44:aa:bb:cc password NewPassword
switch(config)# fcsp dhchap devicename
00:11:55:66:00:aa:bb:cc password 0
NewPassword
switch(config)# fcsp dhchap devicename
00:11:22:33:55:aa:bb:cc password 7 asdflkjh

About the DHCHAP Timeout Value

During the DHCHAP protocol exchange, if the MDS switch does not receive the expected DHCHAP
message within a specified time interval, authentication failure is assumed. The time ranges from 20 (no
authentication is performed) to 1000 seconds. The default is 30 seconds.
When changing the timeout value, consider the following factors:
•
•

Configuring the DHCHAP Timeout Value

To configure the DHCHAP timeout value, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# fcsp timeout 60
switch(config)# no fcsp timeout 60

Configuring DHCHAP AAA Authentication

You can individually set authentication options. If authentication is not configured, local authentication
is used by default.
Cisco MDS 9000 Family CLI Configuration Guide
36-8
The existing RADIUS and TACACS+ timeout values.
The same value must also be configured on all switches in the fabric.
Chapter 36
Purpose
Enters configuration mode.
Configures a password for another switch in the
fabric that is identified by the switch WWN
device name.
Removes the password entry for this switch from
the local authentication database.
Configures a clear text password for another
switch in the fabric that is identified by the switch
WWN device name.
Configures a password entered in an encrypted
format for another switch in the fabric that is
identified by the switch WWN device name.
Purpose
Enters configuration mode.
Configures the reauthentication timeout to be 60 seconds.
Reverts to the factory default of 30 seconds.
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Configuring FC-SP and DHCHAP