Security; Network Manageability; Security Features - HP A7533A - Brocade 4Gb SAN Switch Base Hardware Reference Manual

Security

Table 22 highlights some of the key security features available for the DC04 SAN Director running
Fabric OS 6.2.0a or later, and for other HP enterprise-class platforms running Fabric OS 5.2.0 or
later. For details, contact HP.
Table 22 Security features

Security Features

DH-CHAP
SSHv2 (using AES, 3DES, RSA)
HTTPS (using AES)
SNPMv3
FC-SP
Secure RPC
Secure file copy (SCP)
Telnet disable
Telnet timeout
IP filters (block listeners)
Secure passwords (centralized control via RADI-
US/CHAP)
Multiple User Accounts (MUAs). Up to 255.
Role-Based Access Controls (RBACs)
Administrative domains/Virtual fabrics
Boot PROM password reset
Password hardening policies
Upfront login in Web Tools

Network manageability

The DC04 SAN Director has a single domain and is managed as a single element with the Data
Center Fabric Manager (DCFM) Graphical User Interface (GUI) application. The DC04 SAN Director
responds to its own IP address and appears as a separate entity to the Telnet protocol and SNMP.
All management interfaces, such as Telnet, Web Tools, standards compliant SMI-S, and Management
Server, support a "port N within blade M" naming scheme.
Description
Login banner
Monitoring of attempted security breaches (via audit log-
ging)
Monitoring of attempted security breaches (via Fabric Watch
Security Class)
FC security policies: DCC and SCC
Trusted Switch (FCS) for central security management
Management access controls (SNMPv3, Telnet, FTP, serial
port, front panel)
Hardware-enforced zoning by WWN and/or domain/port
ID
Default zoning
RSCN suppression and aggregation
Configurable RSCN suppression by port
NTPv3 (to synchronize timestamps)
Event auditing
Change tracking
Firmware change alerts in Fabric Manager
Persistent port disable
Persistent domain ID
E_port disable
HP StorageWorks DC and DC04 SAN Backbone Director Switches 121