HP StorageWorks 2/128 - SAN Director Switch Release Note page 17

Table 5: Fabric OS Area Information (Continued)
Fabric OS Area
Security: empty
policies
Security: error counter
Security: fabric
segment
Security: FCS list
Security: HTTP policy
Security: invalid
certificate
Security: PKICERT
utility, CSR syntax
SAN Director 2/128 Fabric OS 4.2.x Release Notes
CAUTION: If Telnet, API, and serial port access policies are empty, the user
will not be able to communicate with the switch.
Workaround: Contact your switch provider for the recovery procedure.
Telnet security errors that arrive in quick succession are recorded as a single
violation by the telnet error counter. For example, a login error from a host
whose IP address is 192.168.44.247 is logged as follows:
Security violation: Login failure attempt via
TELNET/SSH/RSH. IP Addr: 192.168.44.247
If another login violation occurs immediately, the message remains the
same and only the error counter is incremented.
When two secure fabrics are continuously joined and separated while the
CPU is under heavy load, the fabric segments after approximately 30
cycles.
Adding switches to the FCS list does not automatically join the switches in a
secure fabric. Add the switches to the FCS list of the new switches and the
target fabric. Reset the version stamp to 0 and either reset the E_Ports or
perform a switch disable and enable for the switches to join.
If HTTP_Policy is empty, you will not be able to log in and will receive a
Page not found error. This is expected behavior for this policy.
Web Tools and Fabric OS are not consistent in how they report switch
certificate status. Web Tools reports a valid certificate with extra characters
appended to it as invalid, whereas Fabric OS accepts the certificate and
allows a secmodeenable command to complete successfully.
Before using the PKICERT utility to prepare a certificate signing request
(CSR), ensure that there are no spaces in the switch names of any switches
in the fabric. The Web site that processes the CSRs and generates the digital
certificates does not accept switch names containing spaces; CSRs that do
not conform to this requirement are rejected.
Description
Important Notes
17