Emulex 3.4 user manual LWWNRWWNatovamoddirtlisthlistdhgplistreauth

Table 4: emlxs.conf Parameters (Continued)

Property	Default	Min	Max	Activation	Comments
Name
auth-cfgs	Description and Values: This is the DH-CHAP related driver property for FC-SP support. It is
	only valid when driver property enable-auth is set to 1. This driver property should be ignored
	when enable-auth is set to 0.

This property represents a table of entries. The format of the table is:

"LWWNRWWNatovamoddirtlisthlistdhgplistreauth",

"LWWNRWWNatovamoddirtlisthlistdhgplistreauth",

"LWWNRWWNatovamoddirtlisthlistdhgplistreauth";

The table can hold as many entries as needed.

LWWN: The WWPN of the local entity, i.e. HBA port. You should use the form of NNNNNNNNNNNNNNNN, where NNNNNNNNNNNNNNNN is a 16 digit hexadecimal representation of the Host port World Wide Port Name. Or you could use 0000000000000000 to refer to the local port WWPN.

RWWN: The WWPN of the remote entity, i.e. Fabric controller or any remote Nport. You should use the form of NNNNNNNNNNNNNNNN, where NNNNNNNNNNNNNNNN is a 16 digit hexadecimal representation of the Fabric Controller or Nport FFFFFFFFFFFFFFFF as generic remote fabric port WWPN.

atov: The authentication timeout value in seconds (hexadecimal format). The atov range is 20 to 999 seconds in hexidecimal. For example, 45 seconds would be entered as 002d.

amod: The authentication mode. The valid modes are specified as 1 (Disabled), 2 (Active) and 3 (Passive). For a detailed description of the mode, please see the Emulex HBAnyware utility help page.

dir: The bi-directional authentication parameter. When set to 1, bi-directional authentication is enabled. When set to 0, bi-directional authentication is disabled. When bidirectional authentication is enabled, the key associated with remote entity must be specified in the auth- keys driver property.

tlist: The authentication type list (4 digits). Currently the Emulex LPFC driver only supports DH-CHAP, tlist should always be set to 1000.

hlist: The authentication hash list (4 digits). Currently the Emulex emlxs driver only supports

MD5 and SHA1. 01 refers to MD5, 02 refers to SHA1. For example: 01020000 means MD5, SHA1 in order of preference. 01000000 means MD5 only.

dhgplist: The DH-CHAP group list in order of preference (8 digits). Currently Emulex emlxs driver supports NULL DH-CHAP algorithm and non-NULL DH-CHAP algorithm such as DH group 1024, group 1280, group 1536 and group 2048. The values can be 0 (undefined), 1 (NULL group), 2 (1024), 3 (1280), 4(1536), 5 (2048). For example: 12345000 means NULL, group 1024,1280, 1536 and 2048 in order of preference.

reauth: Reauthentication heart beat interval in minutes (hexadecimal format). For example, 12c means the host side will do the reauthentication every 300 minutes. When set to 0 reauthentication heartbeat is disabled. You can use emlxsX-auth-cfgs to specify the per HBA instance DH-CHAP authentication parameters setup. Any valid setup in this way will overwrite the auth-cfgs setup.

The HBAnyware Utility User Manual Page 75