Q-Logic 59060-02 B manual A1007.000C Security policy restrict mode, security db differs

Models: 59060-02 B

1 62
Download 62 pages 21.93 Kb
Page 35
Image 35
(A1007.000C) (Security policy restrict mode, security db differs)

A

3 – Event Messages Alarm Events

(A1007.000C) (Security policy restrict mode, security db differs)

Meaning:

The current security policy calls for restrict mode which means that

 

all switches in the fabric must have the same security databases or

 

the ISLs will not login. In this case, the security databases differ.

Action:

Reconfigure the active security set so that the ISL group members

 

are the same.

(A1007.000D) (Security policy in mode mode, other switch in mode mode, sec db conflict)

Meaning:

The security policy on the local switch differs from that of the

 

remote switch.

Action:

Configure the security policy on the remote switch to match that of

 

the local switch.

(A1007.000E) (Security: Auth challenge received from WWN port_WWN, not Authorized to join)

Meaning:

A challenge authentication frame was received from a remote

 

switch, but the local switch does not have an entry for itself within

 

the active security set ISL group.

Action:

Edit the ISL group to include the local switch.

(A1007.000F) (Security: Chap session Gen Response indicates error, chap unable to authenticate)

Meaning:

An Authentication Response frame cannot be built because the

 

CHAP session is not in the right state. The port will isolate.

Action:

Check the remote device for a possible error condition. Reset the

 

port to retry again. If errors continue, disable CHAP for this device

 

if it belongs in the fabric.

(A1007.0010) (Security: Chap session Receive Challenge indicates bad state, chap unable to authenticate)

Meaning:

The CHAP session state is not in the correct state for a Challenge

 

message. Port will isolate.

Action:

Check the remote device for a possible error condition. Reset the

 

port to retry again. If errors continue, disable CHAP for this device

 

if it belongs in the fabric.

(A1007.0011) (Chap failure, isolating with Invalid Attach)

Meaning:

Frame does not match format for a CHAP status frame. Ports will

 

isolate.

Action:

Check the remote device for a possible error condition. Reset the

 

port to retry again. If errors continue, disable CHAP for this device

 

if it belongs in the fabric.

59060-02 B

3-23

Page 35
Image 35
Q-Logic 59060-02 B manual A1007.000C Security policy restrict mode, security db differs