Q-Logic 5602 - page 98

8 – Connection Security Configuration

Creating an SSL Security Certificate

8-4 59183-01 A

Notes

Contents

Main Document Revision History Table of Contents Section 1 Introduction Section 2 Command Line Interface Usage Section 3 User Account Configuration Section 4 Network and Fabric Configuration Section 6 Port Configuration Section 7 Zoning Configuration Section 8 Connection Security Configuration Section 9 Device Security Configuration Section 10 RADIUS Server Configuration Section 11 Event Log Configuration Section 12 Simple Network Management Protocol Configuration Section 13 Command Reference Page Index List of Tables Section 1 Introduction Switch Models and Examples Intended Audience Related Materials New in This Release Technical Support Availability Train ing Contact Information Page Section 2 Command Line Interface Usage Logging In to the Switch Opening and Closing an Admin Session Entering Commands 2 Command Line Interface Usage Getting Help 2-4 59183-01 A 2.4 Getting Help 2.5 Setting Page Breaks Creating a Support File Page Downloading and Uploading Files Page Section 3 User Account Configuration Displaying User Account Information Creating User Accounts Modifying User Accounts and Passwords Section 4 Network and Fabric Configuration Displaying Name Server Information 4-2 59183-01 A 4.1 Displaying Name Server Information The Show NS command displays the list of WWNs in fabric as shown in the following example: Displaying the Ethernet Network Configuration 59183-01 A 4-3 4.2 Displaying the Ethernet Network Configuration The Show Setup System command displays the switch network configuration as Configuring the Ethernet Port 4-4 59183-01 A 4.3 Configuring the Ethernet Port Verifying a Switch in the Network Verifying and Tracing Fibre Channel Connections Page Section 5 Switch Configuration Displaying Switch Information Displaying Switch Information 5-2 59183-01 A 5.1.1 Switch Operational Information System Process Information Elapsed Time Between Resets Configuration Information Switch Configuration Parameters Zoning Configuration Parameters Security Configuration Parameters Hardware Information Displaying Switch Information 5-8 59183-01 A 5.1.6 Firmware Information Managing Switch Services Managing Switch Services 5-10 59183-01 A Managing Switch Configurations Display a List of Switch Configurations Activate a Switch Configuration Copy a Switch Configuration Delete a Switch Configuration Modify a Switch Configuration Managing Switch Configurations 59183-01 A 5-13 To make temporary changes to the switch administrative state, enter the Set Switch State command. Back Up and Restore a Switch Configuration Creating the Backup File Downloading the Configuration File Restoring the Configuration File Paging a Switch Setting the Date and Time Setting the Date and Time 5-18 59183-01 A Enter the Set Timezone to change the time zone as shown in the following example: Enter the Date command to display the date and time as shown in the following example: Enter the Date command within an Admin session to set the date and time as Setting the Date and Time 59183-01 A 5-19 Resetting a Switch Installing Firmware Nondisruptive Activation One-Step Firmware Installation Page Custom Firmware Installation Managing Switch Feature Upgrades Display Feature Licenses Install a Feature License Key Page Section 6 Port Configuration Displaying Port Information 6-2 59183-01 A 6.1.1 Port Configuration Parameters 59183-01 A 6-3 6.1.2 Port Operational Information Enter the Show Port command to display port operational information. 6-4 59183-01 A 6.1.3 Port Threshold Alarm Configuration Parameters 59183-01 A 6-5 6.1.4 Port Performance Transceiver Information Modifying Port Operating Characteristics 59183-01 A 6-7 6.2 Modifying Port Operating Characteristics Port Binding Resetting a Port Configuring Port Threshold Alarms Configuring Port Threshold Alarms 59183-01 A 6-11 Testing a Port Online Tests for Ports Offline Tests for Ports Display Port Test Results Cancel a Port Test Extending Port Transmission Distance 59183-01 A 6-15 6.7 Extending Port Transmission Distance Extending Port Transmission Distance 6-16 59183-01 A Section 7 Zoning Configuration Displaying Zoning Database Information Configured Zone Set Information 59183-01 A 7-3 7-4 59183-01 A 7.1.2 Active Zone Set Information Zone Set Membership Information Zone Membership Information Alias and Alias Membership Information Zoning Modification History 7-8 59183-01 A 7.1.7 Zoning Database Limits Configuring the Zoning Database Configuring the Zoning Database 7-10 59183-01 A The Config Edit session provides access to the Set Config Zoning command as Modifying the Zoning Database Resetting the Zoning Database Removing Inactive Zone Sets, Zones, and Aliases Managing Zone Sets Create a Zone Set Delete a Zone Set Rename a Zone Set Copy a Zone Set Add Zones to a Zone Set Remove Zones from a Zone Set Activate a Zone Set Deactivate a Zone Set Managing Zones Create a Zone Delete a Zone Rename a Zone Copy a Zone Add Members to a Zone Remove Members from a Zone Managing Aliases Create an Alias Delete an Alias Rename an Alias Copy an Alias Add Members to an Alias Remove Members from an Alias Section 8 Connection Security Configuration Managing SSL and SSH Services 8 Connection Security Configuration Managing SSL and SSH Services 8-2 59183-01 A Displaying SSL and SSH Services Creating an SSL Security Certificate Page Section 9 Device Security Configuration Displaying Security Database Information Configured Security Set Information 9 Device Security Configuration Displaying Security Database Information 59183-01 A 9-3 9 Device Security Configuration Displaying Security Database Information 9-4 59183-01 A 9.1.2 Active Security Set Information Security Set Membership Information Group Membership Information Security Database Modification History Security Database Limits Configuring the Security Database Page Modifying the Security Database Resetting the Security Database Managing Security Sets Create a Security Set Delete a Security Set Rename a Security Set Copy a Security Set Add Groups to a Security Set Remove Groups from a Security Set Activate a Security Set Deactivate a Security Set Managing Groups Create a Group Delete a Group Rename a Group Copy a Group Add Members to a Group Modify a Group Member Remove Members from a Group Section 10 RADIUS Server Configuration 10 RADIUS Server Configuration Displaying RADIUS Server Information 10-2 59183-01 A 10.1 Displaying RADIUS Server Information 10 RADIUS Server Configuration Configuring a RADIUS Server on the Switch 59183-01 A 10-3 10.2 Configuring a RADIUS Server on the Switch Page Section 11 Event Log Configuration Starting and Stopping Event Logging Displaying the Event Log Filtering the Event Log Display Controlling Messages in the Output Stream Managing the Event Log Configuration Configure the Event Log Display the Event Log Configuration Restore the Event Log Configuration Clearing the Event Log Logging to a Remote Host Creating and Downloading a Log File Page Section 12 Simple Network Management Protocol Configuration Managing the SNMP Service Managing the SNMP Service 12-2 59183-01 A Enter the Set Setup Services command to enable SNMP as shown in the following example: Displaying SNMP Information 59183-01 A 12-3 12.2 Displaying SNMP Information Modifying the SNMP Configuration 12-4 59183-01 A 12.3 Modifying the SNMP Configuration Resetting the SNMP Configuration Page Section 13 Command Reference Access Authority Syntax and Keywords Notes and Examples Command Listing Admin Authority Syntax Keywords Notes Examples Alias Authority Syntax Keywords Examples Config Authority Syntax Keywords Notes Config 59183-01 A 13-9 Examples Create Authority Syntax Keywords Create 59183-01 A 13-11 Examples is available on the workstation: Page Date Exit Fcping Syntax Keywords Examples Fctrace Syntax Keywords Examples Feature Authority Syntax Keywords Notes Examples The following is an example of the Feature Log command: Firmware Install Syntax Examples Firmware Install 59183-01 A 13-21 The following is an example of the Firmware Install command using TFTP: Group Authority Syntax Keywords Table 13-1. ISL Group Member Attributes Table 13-2. Port Group Member Attributes Page Page Notes Group 13-28 59183-01 A Examples The following is an example of the Group Edit command: Group 59183-01 A 13-29 The following is an example of the Group List command: The following is an example of the Group Members command: Hardreset Help Syntax Keywords Examples History Syntax Notes Examples Hotreset Syntax Notes Image Syntax Keywords Notes Examples The following is an example of the Image Fetch and Image Unpack commands: Lip Logout Passwd Authority Syntax Keywords Examples Ping Syntax Keywords Examples Ps 59183-01 A 13-41 Ps Displays current system process information. Syntax Examples Quit Reset Syntax Keywords Page Page Notes Enter the Show Config Port command to display port configuration values. Table 13-6. Port Configuration Defaults Enter Show Config Threshold command to display threshold alarm configuration values. Table 13-7. Port Threshold Alarm Configuration Defaults Page Page Page Security Authority Syntax Keywords Page Security 13-54 59183-01 A Examples The following is an example of the Security History command: Security 59183-01 A 13-55 The following is an example of the Security Limits command: The following is an example of the Security List command: Securityset Authority Syntax Keywords Notes Securityset 13-58 59183-01 A Examples The following is an example of the Securityset Groups command The following is an example of the Securityset List command Set Alarm Set Beacon Set Config Port Syntax Keywords Page Page Page Set Config Port 59183-01 A 13-65 Examples Set Config Port 13-66 59183-01 A The following is an example of the Set Config Port command for a 10-Gbps port: Set Config Security Syntax Examples Page Set Config Security Portbinding Syntax Examples Set Config Switch Syntax Examples Table 13-17. Switch Configuration Parameters (Continued) Set Config Threshold Syntax Set Config Threshold 59183-01 A 13-73 Notes Examples Set Config Zoning Syntax Set Config Zoning 59183-01 A 13-75 Examples Set Log Syntax Keywords Page Page Notes Set Pagebreak Syntax Keywords Set Pagebreak 59183-01 A 13-81 Examples Set Port Syntax Page Set Setup Radius Syntax Table 13-20. RADIUS Service Settings (Continued) Set Setup Radius 13-86 59183-01 A Examples Set Setup Services Syntax Table 13-21. Switch Services Settings (Continued) Examples Table 13-21. Switch Services Settings (Continued) Set Setup SNMP Configures SNMP on the switch. Syntax Table 13-22. SNMP Configuration Settings (Continued) Set Setup SNMP 13-92 59183-01 A Examples Set Setup System Syntax Examples Table 13-23. System Configuration Settings (Continued) Set Switch State Syntax Keywords Examples Set Timezone 13-96 59183-01 A Set Timezone Syntax Examples Show About Syntax Examples Show Alarm Syntax Keywords Notes Examples Show Broadcast Show Chassis Syntax Examples Show Config Port 59183-01 A 13-101 Show Config Port Displays configuration parameters for one or more ports. Syntax Examples Show Config Port The following is an example of the Show Config Port command for a 10-Gbps port: Show Config Security 59183-01 A 13-103 Show Config Security Displays the security database configuration parameters. Syntax Examples Show Config Security Portbinding Syntax Examples Show Config Switch 59183-01 A 13-105 Show Config Switch Displays the switch configuration parameters. Syntax Examples Show Config Threshold 13-106 59183-01 A Show Config Threshold Displays alarm threshold parameters for the switch. Syntax Examples Show Config Zoning Syntax Examples Show Domains Syntax Examples Show Donor 59183-01 A 13-109 Show Donor Displays list of current donor and extended credit configuration for all ports. Syntax Examples Show Fabric Syntax Examples Show FDMI Show FDMI 13-112 59183-01A The following is an example of the Show FDMI WWN command: Show Interface Syntax Examples Show Log Syntax Keywords Page Examples Show LSDB 59183-01 A 13-117 Show LSDB Displays Link State database information, Syntax Examples Show Media Syntax Notes Table 13-25. Transceiver Information (Continued) Show Media 13-120 59183-01 A Examples Show Media 59183-01 A 13-121 The following is an example of the Show Media command for all ports: Show Mem Show NS Syntax Keywords Examples The following is an example of the Show NS [port_ID] command: Show Pagebreak Show Perf Syntax Page Show Perf 13-128 59183-01 A Examples The following is an example of the Show Perf Byte command: Show Port Syntax Notes Page Page Page Show Port 59183-01 A 13-133 Examples Show Post Log Show Setup Mfg Syntax Examples Show Setup Radius 13-136 59183-01 A Show Setup Radius Displays RADIUS server information. Syntax Examples Show Setup Services 59183-01 A 13-137 Show Setup Services Displays switch service status information. Syntax Examples Show Setup SNMP 13-138 59183-01 A Show Setup SNMP Displays the current SNMP settings. Syntax The following is an example of the Show Setup Snmp command: Show Setup System Show Setup System Displays the current system settings. Syntax Examples Show Steering Show Switch Displays switch operational information. Syntax Notes Table 13-27. Switch Operational Parameters Examples Table 13-27. Switch Operational Parameters (Continued) Show Timezone Show Topology Syntax Examples Show Topology 59183-01 A 13-145 The following is an example of the Show Topology command for port 1: Show Users Syntax Examples Show Version Syntax Examples Shutdown Test Cancel Test P ort Syntax Notes Test P ort 13-152 59183-01 A Examples Test Status Uptime User Authority Syntax Keywords User Notes logged in do not take effect until that account logs in again. Examples The following is an example of the User Add command: The following is an example of the User Edit command: The following is an example of the User Delete command: The following is an example of the User List command: Whoami Zone Authority Syntax Keywords Page Zone 59183-01 A 13-161 Examples The following is an example of the Zone Members command: Page Zoneset Authority Syntax Keywords Notes Zoneset 59183-01 A 13-165 Examples The following is an example of the Zoneset List command: The following is an example of the Zoneset Zones command: Zoning Authority Syntax Keywords Page Examples Zoning 59183-01 A 13-169 The following is an example of the Zoning Limits command: Zoning 13-170 59183-01 A The following is an example of the Zoning List command: Index A B C D E F G H I K L M N O P Q R S Page Page T U V W Z