Table of Contents
Advertisement
Chapter 31
Configuring FC-SP and DHCHAP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
DHCHAP Timeout Value
During the DHCHAP protocol exchange, if the MDS switch does not receive the expected DHCHAP
message within a specified time interval, authentication failure is assumed. The time ranges from 20 (no
authentication is performed) to 1000 seconds. The default is 30 seconds.
When changing the timeout value, consider the following factors:
•
•
Configuring the Timeout Value
To configure the DHCHAP timeout value, follow these steps:
Command
Step 1
switch# config t
Step 2
switch(config)# fcsp timeout 60
switch(config)# no fcsp timeout 60
Displaying Protocol Security Information
Use the show fcsp commands to display configurations for the local database (see
31-6).
Example 31-1 Displays DHCHAP Configurations in FC Interfaces
switch# show fcsp interface fc1/9
fc1/9:
Example 31-2 Displays DHCHAP Statistics for a FC Interface
switch# show fcsp interface fc1/9 statistics
fc1/9:
Example 31-3 Displays the FC-SP WWN of the Device Connected through a Specified Interface
switch# show fcsp interface fc 2/1 wwn
fc2/1:
OL-6973-03, Cisco MDS SAN-OS Release 2.x
The existing RADIUS and TACACS+ timeout values.
The same value must also be configured all switches in the fabric.
fcsp authentication mode:SEC_MODE_ON
Status: Successfully authenticated
fcsp authentication mode:SEC_MODE_ON
Status: Successfully authenticated
Statistics:
FC-SP Authentication Succeeded:5
FC-SP Authentication Failed:0
FC-SP Authentication Bypassed:0
fcsp authentication mode:SEC_MODE_ON
Status: Successfully authenticated
Other device's WWN:20:00:00:e0:8b:0a:5d:e7
Purpose
Enters configuration mode.
Configures the reauthentication timeout to be 60 seconds.
Reverts to the factory default of 30 seconds.
Cisco MDS 9000 Family Configuration Guide
DHCHAP Timeout Value
Example 31-1
through
31-9
Advertisement
Table of Contents
