Fabric switch settings and connection results, Mutual authentication of ports, Fibre channel authentication – HP XP Racks User Manual

Page 191

Advertising
background image

During authentication of hosts, the connection result is determined depending on the combination
of the following port settings:

Setting of the port in the Port tree: enable (

) or disable (

)

Whether the user information of the fabric switch that attempts to connect is registered on the
port

fabric switch settings and connection results

The following table shows the relationship between the combinations of port settings and the
connection results in authentication of fabric switches. Unless otherwise noted, connection results
are as described regardless of whether the host is configured for authentication by fabric switches
with CHAP.

Connection results

fabric switch
settings

Port Settings

User information of
fabric switch

Authentication at fabric
switch

Connected if the authentication of the fabric switch
succeeded

Registered

Registered

Enabled

Failed to be authenticated and cannot be connected

Not registered

Registered

Enabled

Failed to be authenticated and cannot be connected

Registered

Not registered

Enabled

Connected without authentication of the fabric
switch

---

---

Disabled

If a fabric switch is configured for authentication
by ports with CHAP, authentication of the host will
fail. To allow such a fabric switch to connect to the
port without authentication, do not configure it for
authentication by ports with CHAP.

---: This item does not affect the connection results, or cannot be specified.

Mutual authentication of ports

If mutual authentication is required, when authentication of a host is successful, the host in return
authenticates the port. In authentication of ports, when user information (user name and secret)
specified on the port side matches with that stored on the host, the host allows the host group to
connect.

Fibre channel authentication

Enabling or disabling host authentication on a host group

You can specify whether to authenticate hosts on each host group. Change the user authentication
settings of host groups to enable or disable authentication of hosts. By default, user authentication
is disabled.

Remote Web Console secondary windows must be defined for use in advance. When you select
Modify from the Authentication secondary window to enable or disable host authentication, other
users or programs are prevented from changing storage system settings. When you close the
secondary window, Modify mode is released. For more information on Remote Web Console
secondary windows and Modify mode, see the HP XP7 Remote Web Console User Guide.

Procedure 23 To enable host authentication on a host group

1.

On the menu bar, select Actions, Port/Host Group, and then Authentication.

2.

In the Authentication window, click

to change to Modify mode.

Setting fibre channel authentication

191

Advertising
This manual is related to the following products: