Table of Contents
Advertisement
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Configuring FC-SP and DHCHAP
Fibre Channel Security Protocol (FC-SP) capabilities provide switch-switch and host-switch
authentication to overcome security challenges for enterprise-wide fabrics. Diffie-Hellman Challenge
Handshake Authentication Protocol (DHCHAP) is an FC-SP protocol that provides authentication
between Cisco MDS 9000 Family switches and other devices. DHCHAP consists of the CHAP protocol
combined with the Diffie-Hellman exchange.
This chapter includes the following sections:
About Fabric Authentication, page 31-2
•
About DHCHAP, page 31-3
•
DHCHAP Compatibility with Existing Cisco MDS Features, page 31-3
•
Configuring DHCHAP Authentication, page 31-3
•
•
DHCHAP Configuration, page 31-4
DHCHAP Authentication Modes, page 31-4
•
•
DHCHAP Hash Algorithm Configuration, page 31-6
DHCHAP Group Configuration, page 31-6
•
•
DHCHAP Password Configuration, page 31-7
Password Configuration for Other Devices, page 31-8
•
•
DHCHAP Timeout Value, page 31-9
Displaying Protocol Security Information, page 31-9
•
•
DHCHAP AAA Authentication, page 31-10
Sample Configuration, page 31-11
•
Default Settings, page 31-12
•
OL-6973-03, Cisco MDS SAN-OS Release 2.x
C H A P T E R
Cisco MDS 9000 Family Configuration Guide
31
31-1
Advertisement
Table of Contents
