Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Command Reference Manual page 68

2
authUtil
Examples To display authentication configuration on the switch:
To set DH-CHAP as the authentication protocol:
To set both protocols in order of FCAP and then DH-CHAP:
To set DH group 3:
To set all DH groups to be specified in the authentication negotiation in the order of 0, 1, 2, 3, and
4:
To set the Switch policy to active mode:
To set the Device policy to passive mode:
To start authentication on E/F_Ports 2, 3, and 4:
To disable md5 hash type for FIPS configuration:
42
allE Specify all E_Ports in the switch.
switch:admin> authutil --show
AUTH TYPE HASH TYPE
--------------------------------------
fcap,dhchap sha1,md5
Switch Authentication Policy: PASSIVE
Device Authentication Policy: OFF
switch:admin> authutil --set -a dhchap
Authentication is set to dhchap.
switch:admin> authutil --set -a all
Authentication is set to fcap,dhchap.
switch:admin> authutil --set -g 3
DH Group was set to 3.
switch:admin> authutil --set -g "*"
DH Group is set to 0,1,2,3,4
switch:admin> authutil --policy -sw active
Warning: Activating the authentication policy requires
either DH-CHAP secrets or PKI certificates depending
on the protocol selected. Otherwise, ISLs will be
segmented during next E-port bring-up.
(yes, y, no, n): [no] y
ARE YOU SURE
Auth Policy is set to ACTIVE
switch:admin> authutil --policy -dev passive
Warning: Activating the authentication policy requires
DH-CHAP secrets on both switch and device. Otherwise,
the F-port will be disabled during next F-port
bring-up.
(yes, y, no, n): [no] y
ARE YOU SURE
Device authentication is set to PASSIVE
switch:admin> authutil --authinit 2,3,4
switch:admin> authutil --show
AUTH TYPE HASH TYPE
--------------------------------------
GROUP TYPE
0,1,2,3,4
GROUP TYPE
Fabric OS Command Reference
53-1000599-02