Connection Security Configuration | Q-Logic 5602 instruction

SANbox 5000 Series Fibre Channel Switch Command Line Interface Guide

S

7.8.5	Add Members to an Alias	7-18
7.8.6	Remove Members from an Alias	7-18

Section 8 Connection Security Configuration
8.1	Managing SSL and SSH Services	8-1
8.2	Displaying SSL and SSH Services	8-3
8.3	Creating an SSL Security Certificate	8-3

Section 9	Device Security Configuration
9.1	Displaying Security Database Information	9-2
9.1.1	Configured Security Set Information	9-2
9.1.2	Active Security Set Information	9-4
9.1.3	Security Set Membership Information	9-5
9.1.4	Group Membership Information	9-5
9.1.5	Security Database Modification History	9-6
9.1.6	Security Database Limits	9-6
9.2	Configuring the Security Database	9-7
9.3	Modifying the Security Database	9-9
9.4	Resetting the Security Database	9-9
9.5	Managing Security Sets	9-10
9.5.1	Create a Security Set	9-10
9.5.2	Delete a Security Set	9-10
9.5.3	Rename a Security Set	9-10
9.5.4	Copy a Security Set	9-10
9.5.5	Add Groups to a Security Set	9-11
9.5.6	Remove Groups from a Security Set	9-11
9.5.7	Activate a Security Set	9-11
9.5.8	Deactivate a Security Set	9-11
9.6	Managing Groups	9-12
9.6.1	Create a Group	9-12
9.6.2	Delete a Group	9-12
9.6.3	Rename a Group	9-12
9.6.4	Copy a Group	9-13
9.6.5	Add Members to a Group	9-13
9.6.6	Modify a Group Member	9-14
9.6.7	Remove Members from a Group	9-14
Section 10 RADIUS Server Configuration
10.1	Displaying RADIUS Server Information	10-2
10.2	Configuring a RADIUS Server on the Switch	10-3

Page vi

59183-01 A

Image 6

Q-Logic 5602 manual Connection Security Configuration, Section Device Security Configuration, Radius Server Configuration

Contents

Firmware Version Document Revision History Table of Contents Section Port Configuration Section Zoning Configuration Radius Server Configuration Connection Security ConfigurationSection Device Security Configuration Add Members to an Alias Remove Members from an Alias Command Reference Event Log ConfigurationSimple Network Management Protocol Configuration Section 59183-01 a Index List of Tables Introduction Switch Models and Examples Intended AudienceRelated Materials New in This Release Technical Support AvailabilityTraining Contact Information Support Headquarters Introduction Technical Support 59183-01 a Command Line Interface Usage This section describes the following tasks Logging In to the Switch To log off, enter the Exit command Opening and Closing an Admin Session Entering CommandsCommand-Line Completion Setting Page Breaks Getting Help Creating a Support File Local directory now /itasca/conf/images bin Ftp Downloading and Uploading Files Userimages password images User Account Configuration Factory User Accounts Displaying User Account Information Creating User Accounts Modifying User Accounts and Passwords Following example deletes the user account named user3 Network and Fabric Configuration Displaying Name Server Information Displaying the Ethernet Network Configuration WWN Configuring the Ethernet Port Verifying a Switch in the Network Verifying and Tracing Fibre Channel ConnectionsFollowing is an example of a connection failure Port Displaying Switch Information Switch configuration consists of the following tasks Switch Operational Information System Process Information PID Ppid CPU Time Elapsed Time Between Resets Configuration Information Switch Configuration Parameters Zoning Configuration Parameters Security Configuration Parameters Hardware Information Heartbeat LED Activity Firmware Information Managing Switch Services Please Note Managing Switch Configurations Display a List of Switch ConfigurationsActivate a Switch Configuration Copy a Switch Configuration Delete a Switch ConfigurationModify a Switch Configuration Decimal value, 100-100000 msec Back Up and Restore a Switch Configuration Creating the Backup File Downloading the Configuration File Restoring the Configuration File Ftp ipaddress user images password images ftp bin Paging a Switch Setting the Date and Time Switch Configuration Setting the Date and Time List Resetting a Switch Installing FirmwareSwitch Reset Methods One-Step Firmware Installation Nondisruptive Activation Enter the password for your account name FTP only Custom Firmware Installation Wait for the unpack to complete Managing Switch Feature Upgrades Display Feature Licenses Install a Feature License Key Page Displaying Port Information This section describes the following topicsYou can display the following port information Port Configuration Parameters Arbff Port Operational Information PL-XPL-VC-SG3-22 Port Threshold Alarm Configuration Parameters Port Performance Transceiver Information FTRJ8524P2BNL Modifying Port Operating Characteristics Set config port Port Binding Resetting a Port SANbox admin-config # set config security port Configuring Port Threshold Alarms SANbox admin-config # set config threshold Testing a Port Online Tests for Ports Offline Tests for Ports Cancel a Port Test Display Port Test Results Extending Port Transmission Distance Current value SANbox # show donor Port Config Zoning Configuration Configured Zone Set Information Displaying Zoning Database Information SANbox # zoning list Active ZoneSet Information Active Zone Set Information Zone Set Membership Information Zone Membership Information Alias and Alias Membership Information Zoning Modification History Zoning Database Limits E2JBOD2 Configuring the Zoning Database SANbox # admin start SANbox admin # config edit Modifying the Zoning Database Resetting the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Delete a Zone Set Managing Zone SetsCreate a Zone Set Managing Zone Sets consists of the following tasks Add Zones to a Zone Set Rename a Zone SetCopy a Zone Set Remove Zones from a Zone Set Create a Zone Deactivate a Zone SetManaging Zones Delete a Zone Add Members to a Zone Rename a ZoneCopy a Zone Remove Members from a Zone Delete an Alias Managing AliasesCreate an Alias Rename an Alias Copy an Alias Add Members to an AliasRemove Members from an Alias Connection Security Configuration Managing SSL and SSH Services TelnetEnabled True / False SSHEnabled Displaying SSL and SSH Services Creating an SSL Security CertificatePage Device Security Configuration Configured Security Set Information Displaying Security Database Information MD5 Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configuring the Security Database Set Config Security command Before Reaching the end of the list Resetting the Security Database Modifying the Security Database Delete a Security Set Managing Security SetsCreate a Security Set Rename a Security Set Activate a Security Set Add Groups to a Security SetRemove Groups from a Security Set Deactivate a Security Set Delete a Group Managing GroupsCreate a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group Radius Server Configuration Displaying Radius Server Information Configuring a Radius Server on the Switch Page Event Log Configuration Starting and Stopping Event Logging Displaying the Event Log Filtering the Event Log Display Controlling Messages in the Output Stream Managing the Event Log Configuration Configure the Event Log Display the Event Log Configuration Restore the Event Log ConfigurationClearing the Event Log Logging to a Remote Host Creating and Downloading a Log File Page Managing the Snmp Service You control the Snmp service SNMPEnabled parameters through 12-2 59183-01 a Displaying Snmp Information Modifying the Snmp Configuration Resetting the Snmp Configuration SANbox admin # reset snmpPage Command Reference Access Authority Command Syntax and Keywords Command Listing Commands are listed in alphabetical order as follows Syntax AdminAuthority Keywords Keywords add alias memberlist AliasSyntax alias Copy aliassource aliasdestination Members alias Delete aliasList Remove alias memberlist Config Syntax configKeywords activate configname Edit configname RestoreSave configname 59183-01 a 13-9 Create Keywords certificateSupport 59183-01 a 13-11 Following is an example of the Create Certificate command SANbox admin # create support Date Syntax dateKeywords MMDDhhmmCCYY Exit Authority None Syntax exitCloses the Telnet session Fcping Authority NoneKeywords address Fctrace PortdestinationHopcount Examples The following is an example of the Fctrace command Add licensekey log FeatureSyntax feature Keywords add licensekey Following is an example of the Feature Log command Firmware Install Syntax firmware install 59183-01 a 13-21 Group Syntax group Keywords add group ISL Group Member Attributes Port Group Member Attributes Copy groupsource groupdestination Configures security for attachments to other switchesMS Group Member Attributes Create group type Edit group member Group Member Attributes Rename groupold groupnew Members groupRemove group memberlist Securitysets group Following is an example of the Group Edit command Following is an example of the Group List command Following is an example of the Group Members command Hardreset Syntax hardreset Help Help command keywordCommand Keyword History Re-execute selected commandsFollowing is an example of the History command History Hotreset Hotreset Keywords cleanup ImageSyntax image Unpack file 13-36 59183-01 a Reinitializes the specified loop port Following is an example of the Lip commandLip Lip portnumber Logout Authority None Syntax logout Passwd Syntax passwd accountname Keywords accountname Ping Ping ipaddressIpaddress Examples The following is an example of the Ps command Authority None Syntax psDisplays current system process information Quit Authority None Syntax quit Reset Syntax resetKeywords config configname Port portlist ServicesFactory Radius System SwitchWorkstation could lose communication with the switch Zoning Switch Configuration Defaults Values Port Configuration Defaults Parameter 4-Gbps Port Defaults Port Threshold Alarm Configuration Defaults Zoning Configuration Defaults Snmp Configuration Defaults 10. Radius Configuration Defaults 11. Services Configuration Defaults 12. System Configuration Defaults 13. Security Configuration Defaults Security Keywords activeClear Edit LimitsSave Following is an example of the Security History command Following is an example of the Security Limits command Following is an example of the Security List command Keywords activate securityset SecuritysetSyntax securityset Active Deactivate Copy securitysetsource securitysetdestinationCreate securityset Delete securityset Following is an example of the Securityset Groups command Following is an example of the Securityset List command Keywords option Set AlarmSyntax set alarm option Option can be one of the following Set Beacon Set beacon stateState Keywords port portnumber Set Config Port14. Port Configuration Parameters Ports portnumber Send Arbff True instead of IDLEs False on the loop 14. Port Configuration Parameters 14. Port Configuration Parameters 59183-01 a 13-65 13-66 59183-01 a Set Config Security Syntax set config security15. Security Configuration Parameters 13-68 59183-01 a Set Config Security Portbinding 16. Port Binding Configuration Parameters Set Config Switch Syntax set config switch17. Switch Configuration Parameters Resource Allocation Timeout Value. The number of millisec Set Config Threshold Syntax set config threshold18. Port Alarm Threshold Parameters Error rate has fallen below the falling trigger Following is an example of the Set Config Threshold command Set Config Zoning Syntax set config zoning19. Zoning Configuration Parameters 59183-01 a 13-75 Archive Set LogSet log Component filterlist Display filter Monitors none of the severity levels Disables monitoring on all portsLevel filter Specifies all ports Stop Alarms are always logged and always displayed on the screenStart Stops logging of events Set Pagebreak Keywords stateSyntax pagebreak state 59183-01 a 13-81 Set port clear EnableSet Port Set port portnumber Speed transmissionspeed State state Set setup radius Set Setup RadiusConfigures Radius servers on the switch Configuration fields 20. Radius Service Settings 13-86 59183-01 a Syntax set setup services Set Setup ServicesConfigures services on the switch 21. Switch Services Settings 21. Switch Services Settings 59183-01 a 13-89 Syntax set setup snmp Set Setup SnmpConfigures Snmp on the switch 22. Snmp Configuration Settings 22. Snmp Configuration Settings 13-92 59183-01 a Set Setup System Syntax set setup system23. System Configuration Settings 13-94 59183-01 a Set switch state state Set Switch StateAdmin session State can be one of the following Set Timezone Set timezone Show About Authority None SyntaxShow about Settings Show AlarmShow alarm Following is an example of the Show Alarm command Show Broadcast Syntax show broadcast Displays chassis component status and temperature Show ChassisShow chassis Show config port portnumber Show Config PortDisplays configuration parameters for one or more ports Portnumber 13-102 59183-01 a Show Config Security Displays the security database configuration parametersSyntax show config security Show Config Security Portbinding Show config security portbinding portnumber Show Config Switch Displays the switch configuration parametersSyntax show config switch Show Config Threshold Displays alarm threshold parameters for the switchSyntax show config threshold Show Config Zoning Displays zoning configuration parameters for the switchSyntax show config zoning Show Domains Syntax show domains Show Donor Show donor Show Fabric Show fabric Portwwn Show FdmiShow fdmi portwwn Question marks ? Following is an example of the Show Fdmi WWN command Show Interface Displays the status of the active network interfacesSyntax show interface Numberofevents Show LogShow log Component Level Options Following is an example of the Show Log Options command SettingsFollowing is an example of the Show Log Level command Port Show Lsdb Displays Link State database informationShow lsdb Show media InstalledShow Media Portlist 25. Transceiver Information 13-120 59183-01 a 59183-01 a 13-121 Displays information about memory activity Following is an example of the Show Mem commandShow Mem Show mem count Show NS Show ns optionOption Following is an example of the Show NS portID command Displays the current pagebreak setting Show PagebreakSyntax show pagebreak Keywords portlist Show PerfSyntax show perf portlist Byte portlist Frame portlist Errors portlistOutbyte portlist Inframe portlist Following is an example of the Show Perf Byte command Show Port Show port26. Show Port Parameters Lipalpdalps LIPF7F7 26. Show Port Parameters 59183-01 a 13-133 Show Post Log Syntax show post log Show Setup Mfg Displays manufacturing information about the switchSyntax show setup mfg Show Setup Radius Syntax show setup radiusDisplays Radius server information Show Setup Services Displays switch service status informationSyntax show setup services Syntax show setup snmp Show Setup SnmpDisplays the current Snmp settings Following is an example of the Show Setup Snmp command Show Setup System Displays the current system settingsSyntax show setup system Show Steering Show steering domainidDomainid Show switch Show SwitchDisplays switch operational information 27. Switch Operational Parameters 13-142 59183-01 a Displays the current time zone setting Show TimezoneSyntax show timezone Show Topology Displays all connected devicesSyntax show topology 59183-01 a 13-145 Show Users Show users Show Version Shutdown Syntax shutdown Test Cancel Test cancelPort portnumber Offline loopbacktype Test PortSyntax test port portnumber Online 28. Port Test Parameters 13-152 59183-01 a Test Status Test status Examples The following is an example of the Uptime command UptimeAuthority None Syntax uptime Keywords accounts UserSyntax user Add Following is an example of the User Add command Following is an example of the User Edit command Following is an example of the User Delete command Following is an example of the User List command Examples The following is an example of the Whoami command WhoamiAuthority None Syntax whoami Keywords add zone memberlist ZoneSyntax zone Copy zonesource zonedestination Remove zone memberlist Delete zoneMembers zone Rename zoneold zonenew Following is an example of the Zone Members command Following is an example of the Zone Zonesets command Zoneset Syntax zoneset Rename zonesetold zonesetnew Delete zonesetRemove zoneset zonelist Zones zoneset Following is an example of the Zoneset List command Following is an example of the Zoneset Zones command Zoning Syntax zoningDelete orphans Opens a Zoning Edit session 29. Zoning Database Limits 13-168 59183-01 a Following is an example of the Zoning Limits command Following is an example of the Zoning List command Index Index-2 59183-01 a Example FTP See File Transfer Protocol Index-4 59183-01 a 59183-01 a Index-5 Index-6 59183-01 a Set Config Security Port command Show Config Security Port command 59183-01 a Index-9 Index-10 59183-01 a 59183-01 a Index-11