About Password Configuration For Remote Devices; Configuring Dhchap Passwords For Remote Devices; About The Dhchap Timeout Value - Cisco nexus 5000 series Cli Configuration Manual

DHCHAP
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

About Password Configuration for Remote Devices

You can configure passwords in the local authentication database for other devices in a fabric. The other
devices are identified by their device name, which is also known as the switch WWN or device WWN.
The password is restricted to 64 characters and can be specified in clear text (0) or in encrypted text (7).
Note The switch WWN identifies the physical switch. This WWN is used to authenticate the switch and is
different from the VSAN node WWN.

Configuring DHCHAP Passwords for Remote Devices

To locally configure the remote DHCHAP password for another switch in the fabric, perform this task:
Command
Step 1
switch# configuration terminal
Step 2
switch(config)# fcsp dhchap devicename
switch-wwn password password
switch(config)# no fcsp dhchap devicename
switch-wwn password password
The following example configures a clear text password for another switch in the fabric that is identified
by the switch WWN device name:
switch(config)# fcsp dhchap devicename 00:11:55:66:00:aa:bb:cc password 0 NewPassword
The following example configures a password entered in an encrypted format for another switch in the
fabric that is identified by the switch WWN device name:
switch(config)# fcsp dhchap devicename 00:11:22:33:55:aa:bb:cc password 7 asdflkjh

About the DHCHAP Timeout Value

During the DHCHAP protocol exchange, if the Cisco Nexus 5000 Series switch does not receive the
expected DHCHAP message within a specified time interval, authentication failure is assumed. The time
ranges from 20 (no authentication is performed) to 1000 seconds. The default is 30 seconds.
When changing the timeout value, consider the following factors:
•
•
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
1-8
The existing RADIUS and TACACS+ timeout values.
The same value must also be configured on all switches in the fabric.
Chapter 1 Configuring FC-SP and DHCHAP
Purpose
Enters configuration mode.
Configures a password for another switch in the
fabric that is identified by the switch WWN
device name.
Removes the password entry for this switch from
the local authentication database.
OL-16597-01