Table of Contents
Advertisement
Configuring FC-SP and DHCHAP
Step 3
DHCHAP Group Settings
All Cisco SAN switches support all DHCHAP groups specified in the standard: 0 (null DH group, which does
not perform the Diffie-Hellman exchange), 1, 2, 3, or 4.
If you change the DH group configuration, change it globally for all switches in the fabric.
Configuring the DHCHAP Group Settings
You can change the DH group settings.
Procedure
Step 1
Step 2
Step 3
DHCHAP Password
DHCHAP authentication in each direction requires a shared secret password between the connected devices.
To do this, you can use one of three configurations to manage passwords for all switches in the fabric that
participate in DHCHAP:
• Configuration 1—Use the same password for all switches in the fabric. This is the simplest configuration.
When you add a new switch, you use the same password to authenticate that switch in this fabric. It is
OL-30895-01
Command or Action
no fcsp dhchap hash sha1
Example:
switch(config)# no fcsp dhchap hash sha1
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
fcsp dhchap dhgroup [0 | 1 | 2 | 3 | 4]
Example:
switch(config)# fcsp dhchap dhgroup
[0|1|2|3|4]
no fcsp dhchap dhgroup [0 | 1 | 2| 3 | ]4]
Example:
switch(config)# no fcsp dhchap dhgroup
[0|1|2|3|4]
Cisco Nexus 5500 Series NX-OS SAN Switching Configuration Guide, Release 7.x
Configuring DHCHAP Authentication
Purpose
Reverts to the factory default priority list of
the MD5 hash algorithm followed by the
SHA-1 hash algorithm.
Purpose
Enters global configuration mode.
Prioritizes the use of DH groups in the
configured order.
Reverts to the DHCHAP factory default
order of 0, 1, 2, 3 and 4.
237
Advertisement
Table of Contents
