Configuring Interswitch Links; Configure Security - HP 316095-B21 Installation Manual

Configuring Interswitch Links

This section describes optional ISL performance features configured through Configure menu
selections. Features include:
• Preferred path—Use the Preferred Path view to specify and configure one or more ISL data paths
between multiple fabric elements. At each fabric element, a preferred path consists of a source
port, exit port, and destination Domain_ID.
• Port fencing—Use the Port Fencing view to minimize ISLs that bounce (repeatedly attempt to
establish a connection), causing disruptive fabric rebuilds. Fencing defines a bounce threshold
that, when reached, automatically blocks the disruptive E_Port.
Verify the LAN installation with the customer. If multiple products are installed or a public LAN
segment is used, network addresses must be changed to conform to the customer's LAN addressing
scheme.

Configure security

This section describes optional product security features configured through Security menu
selections. The enhanced SANtegrity PFE key must be installed. See
on page 91 for instructions. Features include:
• Authentication Settings—The Authentication Settings view provides four pages to configure
optional SANtegrity Authentication features, including:
• User settings—Configure password-protected administrator and operator access to the
HAFM Basic and command line interfaces.
• Software settings—Configure challenge handshake authentication protocol (CHAP)
controlled management interface access (out-of-band and inband) to the product.
• Device settings—Configure a CHAP secret authentication sequence for nodes (devices)
attached to the product through E_Ports or N_ports.
• Port settings—Override product-level authentication settings and enable or disable device
communication on a per-port basis.
• Access Control List—As part of SANtegrity Authentication, use the IP Access Control List view to
configure a list of device IP addresses or a range of device IP addresses authorized to
communicate with the product.
• RADIUS—As part of SANtegrity Authentication, use the RADIUS Server view to configure up to
three remote authentication dial-in user service (RADIUS) servers. A RADIUS server stores and
authenticates passwords and CHAP secrets.
• Enterprise Fabric Mode—Use the Enterprise Fabric Mode view to enable or disable EFM. Fabric
binding is activated when EFM is enabled.
• Fabric Binding—Use the Fabric Binding view to lock parameters of a fabric in accordance with
the user configuration. Fabric binding creates a membership list of element (director or switch)
Domain_IDs and world wide names (WWNs) that can communicate with the product.
• Switch Binding—Use the Switch Binding view to create a membership list of node (device)
WWNs that can attach to the product. The specified connection policy restricts product access
through E_Ports, F_Ports, or in general (all ports).
94 Using the HAFM Basic interface
"Installing PFE keys (Optional)"