HP manual McDATA 4Gb SAN Switch for HP p-Class BladeSystem user guide

Page 27

The conventions for Port security group members are listed below:

You can enter member World Wide Name (WWN), which must be 16 hex characters, or 23 characters with valid WWN format xx:xx:xx:xx:xx:xx:xx:xx.

The authentication choices are None and CHAP.

The Secret field is disabled if authentication is set to None. If authentication is CHAP, the Secret field is enabled. The secondary hash and secret are not supported when connecting to other McDATA products.

Generate is only enabled when authentication is set to CHAP.

The conventions for MS security group members are listed below:

You can enter member World Wide Name (WWN), which must be 16 hex characters, or 23 characters with valid WWN format xx:xx:xx:xx:xx:xx:xx:xx.

The CT (common transport) authentication choices are None, MD5, and SHA-1.

The Secret field is disabled if authentication is set to None, otherwise the Secret field enabled.

Generate is only enabled when authentication is CHAP.

Secret is 16 byte length for MD5 authentication, and 20 bytes if authentication is SHA-1.

To add a member to a security group:

1.Choose one of the following to open the Edit Security dialog from the faceplate display:

Click Security on the tool bar.

Select Security > Edit Security.

2.Choose one of the following to open the Create a Security Group Member dialog:

Click a security group in the graphic window of the Edit Security dialog. Click Security Member in the tool bar.

Right-click on a security group in the graphic window of the Edit Security dialog. Select Create Members from the popup menu.

3.Open the Group Member drop-down list and select a Node World Wide Name. The switch must be a member of any group in which authentication is used. You can also enter a hex value.

4.Open the Authentication drop-down list, and select a type of protocol to be used for the authentication process for that member.

ISL authentication options are None (0 bytes), CHAP (16 bytes)

MS (CT—Common Transport) authentication options are None (0 bytes), MD5 (16 bytes), SHA (20 bytes)

Port authentication options are None (0 bytes), CHAP (16 bytes)

5.Enter an authentication password to be assigned that member in the Secret area. Or, click Generate to randomly generate a secret.

6.Enter the domain ID (97–127) for the switch for the ISL group member in the Binding field (ISL groups only). The WWN of the switch must be at the entered domain ID when attempting to enter the fabric, otherwise it will become isolated.

7.Click OK to save the changes.

Image 27
Contents McDATA 4Gb SAN Switch Page Contents Managing switches Glossary Index Managing portsTables Intended audience PrerequisitesRelated documentation Jdom license Document conventions and symbolsHP-authorized reseller HP technical supportHelpful web sites Using McDATA Web Server/Element Manager Starting McDATA Web Server Workstation requirementsExiting McDATA Web Server or Element Manager Starting Element Manager in HafmSetting preferences Enabling e-mail support Using online helpViewing software version and copyright information Enabling call homeMcDATA Web Server interface User interfaceMenu bar Shortcut keys Popup menusGraphic window McDATA Web Server Fabric treeSelecting switches Data windows and tabsSelecting ports Securing a fabric Security consistency checklistRemote authentication Connection securityUser account security Device security Edit Security dialog Create Security Group dialog Create Security Set dialogCreate Security Group Member dialog McDATA 4Gb SAN Switch for HP p-Class BladeSystem user guide Viewing properties of a security set, group, or member Editing the security configuration on a switchSecurity Config dialog Archiving a security configuration to a fileActivating a security set Rediscovering a fabric Fabric servicesEvents browser Displaying the event browserSorting the event browser Saving the event browser to a file Filtering the event browserDevices data window Working with device information and nicknamesManaging device port nicknames Displaying detailed device informationExporting nicknames to a file Creating a nicknameEditing a nickname Deleting a nicknameZoning a fabric Zoning conceptsZones Zoning database Zone setsZoning limits and properties Editing the zoning database Managing the zoning databaseMcDATA 4Gb SAN Switch for HP p-Class BladeSystem user guide Configuring the zoning database Saving the zoning database to a fileRestoring the zoning database from a file Restoring the default zoning database Managing the active zone setRemoving all zoning definitions Active zone set data window Displaying the configured and active zone setsRemoving a zone set Creating a zone setActivating and deactivating a zone set Removing a zone from a zone setCreating a zone in a zone set Managing zonesAdding zone members Renaming a zone or a zone setRemoving a zone member Zone merge failure recovery Merging fabrics and zoningZone merge failure Managing user accounts Managing switchesCreating user accounts User Account Administration dialog Add Account tabRemoving a user account User Account Administration Dialog Remove Account tabUser Account Administration dialog Change Password tab Changing a user account passwordModifying a user account User Account Administration dialog Modify Account tabConfiguring Radius servers Adding a Radius server Removing a Radius server Editing Radius server information Modifying Radius server authentication order Displaying switch information Switch event logDevice and Host Bus Adapter information Switch data window Switch status and operational informationMcDATA 4Gb SAN Switch for HP p-Class BladeSystem user guide With a switch Ratov McDATA Web Server Configured Zonesets data window Port performance statisticsPort status and operational information Configuring port threshold alarms Setting the date/time and enabling NTP client Paging a switchResetting a switch Switch properties Configuring a switchDomain ID and domain ID lock Syslog Symbolic nameSwitch administrative states Broadcast supportIn-band management Fabric Device Management Interface Advanced switch propertiesSystem services Timeout valuesInterop mode Page Network properties Snmp properties Snmp trap configuration Snmp configurationSwitch binding Archiving a switchRestoring a switch Restoring the factory default configuration Downloading a support file Installing Product Feature Enablement keys Installing firmware Hardware status LEDs Displaying hardware statusPort information data window Managing portsPersistent and will be lost on a switch reset VIEnable and LCFEnable features based on Port statistics data window LIP ALPD,ALPS Alps Port symbolic name Viewing and configuring portsPort states Port types Port speeds Port transceiver media statusDevice scan Resetting a port Testing portsPort binding Page Glossary FRU SFP 100 Index 102 System Fault LED 84 system services 104