HP XP P9500 Storage - Manual (Page 154)

Mutual authentication of ports
If mutual authentication is required, when authentication of a host is successful, the host in return
authenticates the port. In authentication of ports, when user information (user name and secret)
specified on the port side matches with that stored on the host, the host allows the host group to
connect.
Fibre channel authentication
Enabling or disabling host authentication on a host group
You can specify whether to authenticate hosts on each host group. Change the user authentication
settings of host groups to enable or disable authentication of hosts. By default, user authentication
is disabled.
1.
On the menu bar, select Actions, Port/Host Group, and then Authentication.
2. In the Authentication window, click to change to Modify mode.
3. In the Port tree, double-click the Subsystem folder.
If the storage system contains any fibre channel adapters, the Fibre folder appears below the
Subsystem folder.
4. Double-click the Fibre folder and fibre channel port icon under the Fibre folder.
When you double-click the Fibre folder, the fibre channel ports contained in the storage system
appear as icons. If you double-click the fibre channel ports, host groups appear as icons. On
the right of each icon appears the host group name.
indicates the host group authenticates hosts. This is the default.
indicates the host group does not authenticate hosts.
5. Right-click a host group that appears with and select Authentication:Disable -> Enable.
The host group icon changes to , and the port name appears in blue.
6. Click Apply in the Authentication window. A message appears asking whether to apply the
settings to the storage system.
7. Click OK to close the message. The setting are applied to the storage system.
To return the host group setting to , perform the same operation, except select the
Authentication:Enable -> Disable menu in step 4.
Registering host user information
On a host group that performs authentication of hosts, register user information of all hosts that
you allow to connect.
You should register user information of all the hosts to be connected to a host group that performs
authentication of hosts. To allow a specific host to connect to such a host group without
authentication, configure the host group and the host as follows.
On the host: it does not matter if you configure the host for authentication by ports with CHAP, or
not.
1.
On the menu bar, select Actions, Port/Host Group, and then Authentication.
2. In the Authentication window, click to change to Modify mode.
154 Managing logical volumes