Dhchap Configuration; Dhchap Authentication Modes - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

DHCHAP Configuration

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
DHCHAP Configuration
By default, the DHCHAP feature is disabled in all switches in the Cisco MDS 9000 Family.
You must explicitly enable the DHCHAP feature to access the configuration and verification commands
for fabric authentication. When you disable this feature, all related configurations are automatically
discarded.
To enable DHCHAP for a Cisco MDS switch, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# fcsp enable
switch(config)# no fcsp enable

DHCHAP Authentication Modes

The DHCHAP authentication status for each interface depends on the configured DHCHAP port mode.
When the DHCHAP feature is enabled in a switch, each Fibre Channel interface or FCIP interface may
be configured to be in one of four DHCHAP port modes:
•
•
•
•
Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is
Note
performed.
Table 31-1
various modes.
Cisco MDS 9000 Family Configuration Guide
31-4
On—During switch initialization, if the connecting device supports DHCHAP authentication, the
software performs the authentication sequence. If the connecting device does not support DHCHAP
authentication, the software moves the link to an isolated state.
Auto-Active—During switch initialization, if the connecting device supports DHCHAP
authentication, the software performs the authentication sequence. If the connecting device does not
support DHCHAP authentication, the software continues with the rest of the initialization sequence.
Auto-Passive (default)—The switch does not initiate DHCHAP authentication, but participates in
DHCHAP authentication if the connecting device initiates DHCHAP authentication.
Off—The switch does not support DHCHAP authentication. Authentication messages sent to such
ports return error messages to the initiating switch.
identifies the switch-to-switch authentication behavior between two Cisco MDS switches in
Chapter 31
Purpose
Enters configuration mode.
Enables the DHCHAP in this switch.
Disables (default) the DHCHAP in this switch.
Configuring FC-SP and DHCHAP
OL-6973-03, Cisco MDS SAN-OS Release 2.x