HP H-series Enterprise Fabric Management Suite Software - Manual (Page 67)

HP StorageWorks 8/20q and SN6000 Fibre Channel Switch Enterprise Fabric Management Suite User Guide 67
Each switch maintains its own security database consisting of the active security set (if one has been
activated), configured security sets, and groups. A switch may have more than one configured security set,
but only one security set may be active. The security database has the following limits:
• Maximum number of security sets is 4.
• Maximum number of security groups is 16.
• Maximum number of members in a group is 1000.
• Maximum total number of group members is 1000.
Switches, devices, and users can be authenticated locally using the switch security database, or remotely
using a Remote Authentication Dial-In User Service (RADIUS) server. With a RADIUS server, the security
database for the entire fabric resides on the server. In this way, you can manage the security database
centrally, rather than on each switch. For more information about RADIUS server, see ” Using RADIUS
servers ” (page 74).
The device security options and menu selections are available only on the entry switch, and the entry
switch must have a secure connection. To establish a secure connection, the SSL service must be enabled
on the entry switch before you log in. For information about enabling the SSL service, see ” Managing
system services ” (page 97).
You manage device security through the Edit Security dialog box ( Figure 31 ). The Edit Security dialog box
is available only on the entry switch, which must have a secure connection (SSL). To open the Edit Security
dialog box:
1. Select the entry switch in the fabric tree.
2. Click Security on the toolbar, or select Security > Edit Security to open the Edit Security dialog box
( Figure 31 ).
Figure 31 Edit Security dialog box
Use the Edit menu options or popup menu options to access Edit Security dialog box options. These
options enable you to manage the security database, manage security sets, and manage security groups
and members. Select a security item in the graphic window, and select an option in the Edit menu, or
right-click on a security item in the graphic window, and select an option from the popup menus.
Managing the security database
The following sections describe the security database management tasks.