Q-Logic 5602 guide

13 – Command Reference Security

S

Examples The following is an example of the Security Active command:

SANbox #> security active

Active Security Information

SecuritySet	Group	GroupMember
-----------	-----	-----------
alpha	group1 (ISL)
	group1 (ISL)
		10:00:00:00:00:10:21:16
		Authentication	Chap
		Primary Hash	MD5
		Primary Secret	********
		Secondary Hash	SHA-1
		Secondary Secret	********
		Binding	0
		10:00:00:00:00:10:21:17
		Authentication	Chap
		Primary Hash	MD5
		Primary Secret	********
		Secondary Hash	SHA-1
		Secondary Secret	********
		Binding	0

The following is an example of the Security History command:

SANbox #> security history
Active Database Information
---------------------------
SecuritySetLastActivated/DeactivatedBy		Remote
SecuritySetLastActivated/DeactivatedOn		day month date time year
Database Checksum	00000000
Inactive Database Information
-----------------------------
ConfigurationLastEditedBy	admin@IB-session11
ConfigurationLastEditedOn	day month date time year
Database Checksum	00007558

13-54

59183-01 A

Image 184

Q-Logic 5602 manual Following is an example of the Security History command

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Connection Security Configuration Section Device Security ConfigurationRadius Server Configuration Add Members to an Alias Remove Members from an Alias Event Log Configuration Simple Network Management Protocol ConfigurationCommand Reference Section 59183-01 a Index List of Tables Introduction Intended Audience Switch Models and ExamplesRelated Materials New in This Release Availability Technical SupportTraining Contact Information Support Headquarters Introduction Technical Support 59183-01 a Command Line Interface Usage This section describes the following tasks Logging In to the Switch To log off, enter the Exit command Entering Commands Opening and Closing an Admin SessionCommand-Line Completion Setting Page Breaks Getting Help Creating a Support File Local directory now /itasca/conf/images bin Ftp Downloading and Uploading Files Userimages password images User Account Configuration Factory User Accounts Displaying User Account Information Creating User Accounts Modifying User Accounts and Passwords Following example deletes the user account named user3 Network and Fabric Configuration Displaying Name Server Information Displaying the Ethernet Network Configuration WWN Configuring the Ethernet Port Verifying and Tracing Fibre Channel Connections Verifying a Switch in the NetworkFollowing is an example of a connection failure Port Displaying Switch Information Switch configuration consists of the following tasks Switch Operational Information System Process Information PID Ppid CPU Time Elapsed Time Between Resets Configuration Information Switch Configuration Parameters Zoning Configuration Parameters Security Configuration Parameters Hardware Information Heartbeat LED Activity Firmware Information Managing Switch Services Please Note Display a List of Switch Configurations Managing Switch ConfigurationsActivate a Switch Configuration Delete a Switch Configuration Copy a Switch ConfigurationModify a Switch Configuration Decimal value, 100-100000 msec Back Up and Restore a Switch Configuration Creating the Backup File Downloading the Configuration File Restoring the Configuration File Ftp ipaddress user images password images ftp bin Paging a Switch Setting the Date and Time Switch Configuration Setting the Date and Time List Installing Firmware Resetting a SwitchSwitch Reset Methods One-Step Firmware Installation Nondisruptive Activation Enter the password for your account name FTP only Custom Firmware Installation Wait for the unpack to complete Managing Switch Feature Upgrades Display Feature Licenses Install a Feature License Key Page This section describes the following topics Displaying Port InformationYou can display the following port information Port Configuration Parameters Arbff Port Operational Information PL-XPL-VC-SG3-22 Port Threshold Alarm Configuration Parameters Port Performance Transceiver Information FTRJ8524P2BNL Modifying Port Operating Characteristics Set config port Port Binding Resetting a Port SANbox admin-config # set config security port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Testing a Port Online Tests for Ports Offline Tests for Ports Cancel a Port Test Display Port Test Results Extending Port Transmission Distance Current value SANbox # show donor Port Config Zoning Configuration Configured Zone Set Information Displaying Zoning Database Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Set Membership Information Zone Membership Information Alias and Alias Membership Information Zoning Modification History Zoning Database Limits E2JBOD2 Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Resetting the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Managing Zone Sets Create a Zone SetDelete a Zone Set Managing Zone Sets consists of the following tasks Rename a Zone Set Copy a Zone SetAdd Zones to a Zone Set Remove Zones from a Zone Set Deactivate a Zone Set Managing ZonesCreate a Zone Delete a Zone Rename a Zone Copy a ZoneAdd Members to a Zone Remove Members from a Zone Managing Aliases Create an AliasDelete an Alias Rename an Alias Add Members to an Alias Copy an AliasRemove Members from an Alias Connection Security Configuration Managing SSL and SSH Services TelnetEnabled True / False SSHEnabled Displaying SSL and SSH Services Creating an SSL Security CertificatePage Device Security Configuration Configured Security Set Information Displaying Security Database Information MD5 Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configuring the Security Database Set Config Security command Before Reaching the end of the list Resetting the Security Database Modifying the Security Database Managing Security Sets Create a Security SetDelete a Security Set Rename a Security Set Add Groups to a Security Set Remove Groups from a Security SetActivate a Security Set Deactivate a Security Set Managing Groups Create a GroupDelete a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Event Log Configuration Starting and Stopping Event Logging Displaying the Event Log Filtering the Event Log Display Controlling Messages in the Output Stream Managing the Event Log Configuration Configure the Event Log Restore the Event Log Configuration Display the Event Log ConfigurationClearing the Event Log Logging to a Remote Host Creating and Downloading a Log File Page Managing the Snmp Service You control the Snmp service SNMPEnabled parameters through 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration Resetting the Snmp Configuration SANbox admin # reset snmpPage Command Reference Access Authority Command Syntax and Keywords Command Listing Commands are listed in alphabetical order as follows Admin AuthoritySyntax Keywords Alias Syntax aliasKeywords add alias memberlist Copy aliassource aliasdestination Delete alias ListMembers alias Remove alias memberlist Syntax config ConfigKeywords activate configname Restore Edit confignameSave configname 59183-01 a 13-9 Keywords certificate CreateSupport 59183-01 a 13-11 Following is an example of the Create Certificate command SANbox admin # create support Syntax date DateKeywords MMDDhhmmCCYY Authority None Syntax exit ExitCloses the Telnet session Authority None FcpingKeywords address Portdestination FctraceHopcount Examples The following is an example of the Fctrace command Feature Syntax featureAdd licensekey log Keywords add licensekey Following is an example of the Feature Log command Firmware Install Syntax firmware install 59183-01 a 13-21 Group Syntax group Keywords add group ISL Group Member Attributes Port Group Member Attributes Configures security for attachments to other switches MS Group Member AttributesCopy groupsource groupdestination Create group type Edit group member Group Member Attributes Members group Remove group memberlistRename groupold groupnew Securitysets group Following is an example of the Group Edit command Following is an example of the Group List command Following is an example of the Group Members command Hardreset Syntax hardreset Help command keyword CommandHelp Keyword Re-execute selected commands Following is an example of the History commandHistory History Hotreset Hotreset Image Keywords cleanupSyntax image Unpack file 13-36 59183-01 a Following is an example of the Lip command LipReinitializes the specified loop port Lip portnumber Logout Authority None Syntax logout Passwd Syntax passwd accountname Keywords accountname Ping ipaddress PingIpaddress Authority None Syntax ps Examples The following is an example of the Ps commandDisplays current system process information Quit Authority None Syntax quit Syntax reset ResetKeywords config configname Services FactoryPort portlist Radius Switch Workstation could lose communication with the switchSystem Zoning Switch Configuration Defaults Values Port Configuration Defaults Parameter 4-Gbps Port Defaults Port Threshold Alarm Configuration Defaults Zoning Configuration Defaults Snmp Configuration Defaults 10. Radius Configuration Defaults 11. Services Configuration Defaults 12. System Configuration Defaults 13. Security Configuration Defaults Keywords active SecurityClear Limits EditSave Following is an example of the Security History command Following is an example of the Security Limits command Following is an example of the Security List command Securityset Syntax securitysetKeywords activate securityset Active Copy securitysetsource securitysetdestination Create securitysetDeactivate Delete securityset Following is an example of the Securityset Groups command Following is an example of the Securityset List command Set Alarm Syntax set alarm optionKeywords option Option can be one of the following Set beacon state Set BeaconState Set Config Port 14. Port Configuration ParametersKeywords port portnumber Ports portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a Syntax set config security Set Config Security15. Security Configuration Parameters 13-68 59183-01 a Set Config Security Portbinding 16. Port Binding Configuration Parameters Syntax set config switch Set Config Switch17. Switch Configuration Parameters Resource Allocation Timeout Value. The number of millisec Syntax set config threshold Set Config Threshold18. Port Alarm Threshold Parameters Error rate has fallen below the falling trigger Following is an example of the Set Config Threshold command Syntax set config zoning Set Config Zoning19. Zoning Configuration Parameters 59183-01 a 13-75 Set Log Set logArchive Component filterlist Display filter Disables monitoring on all ports Level filterMonitors none of the severity levels Specifies all ports Alarms are always logged and always displayed on the screen StartStop Stops logging of events Keywords state Set PagebreakSyntax pagebreak state 59183-01 a 13-81 Enable Set PortSet port clear Set port portnumber Speed transmissionspeed State state Set Setup Radius Configures Radius servers on the switchSet setup radius Configuration fields 20. Radius Service Settings 13-86 59183-01 a Set Setup Services Configures services on the switchSyntax set setup services 21. Switch Services Settings 21. Switch Services Settings 59183-01 a 13-89 Set Setup Snmp Configures Snmp on the switchSyntax set setup snmp 22. Snmp Configuration Settings 22. Snmp Configuration Settings 13-92 59183-01 a Syntax set setup system Set Setup System23. System Configuration Settings 13-94 59183-01 a Set Switch State Admin sessionSet switch state state State can be one of the following Set Timezone Set timezone Authority None Syntax Show AboutShow about Show Alarm Show alarmSettings Following is an example of the Show Alarm command Show Broadcast Syntax show broadcast Show Chassis Displays chassis component status and temperatureShow chassis Show Config Port Displays configuration parameters for one or more portsShow config port portnumber Portnumber 13-102 59183-01 a Displays the security database configuration parameters Show Config SecuritySyntax show config security Show Config Security Portbinding Show config security portbinding portnumber Displays the switch configuration parameters Show Config SwitchSyntax show config switch Displays alarm threshold parameters for the switch Show Config ThresholdSyntax show config threshold Displays zoning configuration parameters for the switch Show Config ZoningSyntax show config zoning Show Domains Syntax show domains Show Donor Show donor Show Fabric Show fabric Show Fdmi Show fdmi portwwnPortwwn Question marks ? Following is an example of the Show Fdmi WWN command Displays the status of the active network interfaces Show InterfaceSyntax show interface Show Log Show logNumberofevents Component Level Options Settings Following is an example of the Show Log Level commandFollowing is an example of the Show Log Options command Port Displays Link State database information Show LsdbShow lsdb Installed Show MediaShow media Portlist 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Following is an example of the Show Mem command Show MemDisplays information about memory activity Show mem count Show ns option Show NSOption Following is an example of the Show NS portID command Show Pagebreak Displays the current pagebreak settingSyntax show pagebreak Show Perf Syntax show perf portlistKeywords portlist Byte portlist Errors portlist Outbyte portlistFrame portlist Inframe portlist Following is an example of the Show Perf Byte command Show port Show Port26. Show Port Parameters Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Show Post Log Syntax show post log Displays manufacturing information about the switch Show Setup MfgSyntax show setup mfg Syntax show setup radius Show Setup RadiusDisplays Radius server information Displays switch service status information Show Setup ServicesSyntax show setup services Show Setup Snmp Displays the current Snmp settingsSyntax show setup snmp Following is an example of the Show Setup Snmp command Displays the current system settings Show Setup SystemSyntax show setup system Show steering domainid Show SteeringDomainid Show Switch Displays switch operational informationShow switch 27. Switch Operational Parameters 13-142 59183-01 a Show Timezone Displays the current time zone settingSyntax show timezone Displays all connected devices Show TopologySyntax show topology 59183-01 a 13-145 Show Users Show users Show Version Shutdown Syntax shutdown Test cancel Test CancelPort portnumber Test Port Syntax test port portnumberOffline loopbacktype Online 28. Port Test Parameters 13-152 59183-01 a Test Status Test status Uptime Examples The following is an example of the Uptime commandAuthority None Syntax uptime User Syntax userKeywords accounts Add Following is an example of the User Add command Following is an example of the User Edit command Following is an example of the User Delete command Following is an example of the User List command Whoami Examples The following is an example of the Whoami commandAuthority None Syntax whoami Zone Syntax zoneKeywords add zone memberlist Copy zonesource zonedestination Delete zone Members zoneRemove zone memberlist Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Syntax zoneset Delete zoneset Remove zoneset zonelistRename zonesetold zonesetnew Zones zoneset Following is an example of the Zoneset List command Following is an example of the Zoneset Zones command Syntax zoning ZoningDelete orphans Opens a Zoning Edit session 29. Zoning Database Limits 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a Example FTP See File Transfer Protocol Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11