9 – Device Security Configuration Managing Groups

S

9.6.6

Modify a Group Member

Modifying a group member involves changing the member attributes. The member attributes define the authentication method, encryption methods, secrets, and fabric binding, depending on the group type.

„For ISL member attributes, refer to Table 13-1.

„For Port member attributes, refer to Table 13-2.

„For MS member attributes, refer to Table 13-3.

Enter the Group Edit command to change the attributes of a group member:

SANbox #> admin start

SANbox (admin) #> security edit

SANbox (admin-security) #> group edit G1 10:00:00:c0:dd:00:90:a3

A list of attributes with formatting and current values will follow.

Enter a new value

or simply press the

ENTER key to accept

the current value.

If you wish to terminate this process

before reaching the

end of the list

press 'q' or 'Q' and the ENTER key to

do so.

 

 

 

Group Name

g1

 

 

 

 

Group Type

ISL

 

 

 

 

Group Member

10:00:00:c0:dd:00:90:a3

 

 

 

Authentication

(None / Chap)

 

[None]

chap

PrimaryHash

(MD5 / SHA-1)

 

[MD5

]

sha-1

PrimarySecret

(40 hex or 20 ASCII

char value) [

]

12345678901234567890

SecondaryHash

(MD5 / SHA-1 / None)

 

[None]

md5

SecondarySecret

(32 hex or 16 ASCII

char value) [

]

1234567890123456

Binding

(domain ID 1-239, 0=None)

[3

]

 

Finished configuring attributes.

security cancel command.

To discard this configuration use the

9.6.7

Remove Members from a Group

Enter the Group Remove command to remove a member from a group as shown in the following example:

SANbox (admin-security) #> group remove group_1 10:00:00:c0:dd:00:90:a3

9-14

59183-01 A

Page 112
Image 112
Q-Logic 5602 manual Modify a Group Member, Remove Members from a Group