Authentication of fibre channel switches – HP StorageWorks XP Remote Web Console Software User Manual

Page 51

Advertising
background image

Figure 10 Example of authentication of hosts (Fibre Channel environments)

.

In

Figure 10

, host group 1 performs authentication of hosts, but host group 2 does not.

Host A's user information is registered on host group 1, and the authentication setting is enabled.
Therefore, if the authentication of the host succeeds, Host A can connect to the array (or processing
goes to the authentication of the host group). As a precondition of successful authentication, configure
Host A for authentication by host groups with CHAP.

Host B's user information is also registered on host group 1, but the authentication setting is disabled.
Therefore, Host B can connect to the array without authentication.

Host C's user information is not registered on host group 1. Therefore, when Host C tries to connect
to the array, authentication fails and the connection request is denied regardless of Host C's setting.

Host D is attached to host group 2, which does not perform authentication of hosts. Therefore, Host
D can connect to the array without authentication.

Authentication of Fibre Channel switches

When a host attempts to connect to the array, the connection results of the authentication of the Fibre
Channel switch differs depending on the Fibre Channel switch setting related to each port.

Figure 11

illustrates the relationship between Fibre Channel switch settings and the connection results. The Fibre
Channel switch authentication setting is independent from the host authentication setting.

XP LUN Configuration and Security Manager User Guide

51

Advertising
This manual is related to the following products: