About The Dhchap Group Settings; Configuring The Dhchap Group Settings; About The Dhchap Password - Cisco Nexus 5000 Series Configuration Manual

Configuring FC-SP and DHCHAP
Command or Action
Step 3
switch(config)# no fcsp dhchap hash sha1

About the DHCHAP Group Settings

All Cisco Nexus 5000 Series switches support all DHCHAP groups specified in the standard: 0 (null DH
group, which does not perform the Diffie-Hellman exchange), 1, 2, 3, or 4.
If you change the DH group configuration, change it globally for all switches in the fabric.

Configuring the DHCHAP Group Settings

To change the DH group settings, perform this task:
SUMMARY STEPS
1. switch# configuration terminal
2. switch(config)# fcsp dhchap dhgroup [0 | 1 | 2 | 3 | 4]
3. switch(config)# no fcsp dhchap dhgroup [0 | 1 | 2| 3 | 4]
DETAILED STEPS
Command or Action
Step 1 switch# configuration terminal
Step 2 switch(config)# fcsp dhchap dhgroup [0 | 1 | 2 | 3 | 4]
Step 3 switch(config)# no fcsp dhchap dhgroup [0 | 1 | 2| 3 |
4]

About the DHCHAP Password

DHCHAP authentication in each direction requires a shared secret password between the connected devices.
To do this, you can use one of three configurations to manage passwords for all switches in the fabric that
participate in DHCHAP:
• Configuration 1—Use the same password for all switches in the fabric. This is the simplest configuration.
OL-xxxxx-xx
When you add a new switch, you use the same password to authenticate that switch in this fabric. It is
also the most vulnerable configuration if someone from the outside maliciously attempts to access any
one switch in the fabric.
Purpose
Reverts to the factory default priority list of the MD5 hash
algorithm followed by the SHA-1 hash algorithm.
Purpose
Enters configuration mode.
Prioritizes the use of DH groups in the configured order.
Reverts to the DHCHAP factory default order of 0, 4,
1, 2, and 3.
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide
DHCHAP
205