Authentication Protocols - Brocade Communications Systems 1606 Administrator's Manual

7
Authentication policy for fabric elements
•
•
Supported HBAs
The following HBAs support authentication:
•
•
•

Authentication protocols

Use the authUtil command to perform the following tasks:
•
•
•
Run the authUtil command on the switch you want to view or change. Below are the different
options to specify which DH group you want to use.
•
•
•
•
•
Viewing the current authentication parameter settings for a switch
1. Log in to the switch using an account assigned to the admin role.
2. Enter the authUtil
Example of output from the authUtil --show command
Setting the authentication protocol
1. Log in to the switch using an account assigned to the admin role.
2. Enter the authUtil
Example of setting the DH-CHAP authentication protocol
148
FICON channels
Configupload and download will not be supported for the following AUTH attributes: auth type,
hash type, group type.
Emulex LP11000 (Tested with Storport Miniport v2.0 windows driver)
Qlogic QLA2300 (Tested with Solaris v5.04 driver)
Brocade Fibre Channel HBA models 415, 425, 815 and 825
Display the current authentication parameters.
Select the authentication protocol used between switches.
Select the DH (Diffie-Hellman) group for a switch.
00 – DH Null option
01 – 1024 bit key
02 – 1280 bit key
03 - 1536 bit key
04 – 2048 bit key
show.
--
AUTH TYPE HASH TYPE
--------------------------------------
fcap,dhchap sha1,md5
Switch Authentication Policy: PASSIVE
Device Authentication Policy: OFF
set -a command specifying fcap, dhchap, or all.
--
switch:admin> authutil --set -a dhchap
Authentication is set to dhchap.
GROUP TYPE
0, 1, 2, 3, 4
Fabric OS Administrator's Guide
53-1001763-01