beautypg.com

Configuring fibre channel authentication, Enabling or disabling host authentication – HP XP Array Manager Software User Manual

Page 49

background image

Regardless of the setting on the Fibre Channel switch, the port performs authentication of

the Fibre Channel switch, but results in failure. The Fibre Channel switch cannot connect to

the storage system.

When not performing authentication of Fibre Channel switches by ports (Case D):

The Fibre Channel switch will connect to the storage system without authentication of the host,

regardless of whether or not the Fibre Channel switch is configured for authentication with CHAP.

In this case, you need not register the user information for the Fibre Channel switch on the port,

but you can register it.

During authentication of hosts, the connection result is determined depending on the combination of the

following port settings:

Setting of the port in the Port tree: enable ( ) or disable ( )

Whether or not the user information for the Fibre Channel switch that attempts to connect is

registered on the port

Table 5

on page 49 shows the relationship between the combinations of port settings and the connection

results in authentication of Fibre Channel switches. Regardless of whether or not the host is configured

for authentication by Fibre Channel switches with CHAP, the connection results are as follows, unless

otherwise noted.

Table 5 Combinations of Fibre Channel settings and connection results

Port settings

Fibre

Connection results

Authentication:

at Fibre Channel

switch

User Information

for Fibre Channel

switch

Channel

switch

settings

Enable

Registered

Registered

Connected if the authentication of the

Fibre Channel switch succeeded

Enable

Registered

Not registered Failed to be authenticated and cannot

be connected

Enable

Not registered

Registered

Failed to be authenticated and cannot

be connected

Disable

---

---

Connected without authentication of the

Fibre Channel switch*

---: This item does not affect the connection results, or cannot be specified.
* If a Fibre Channel switch is configured for authentication by ports with CHAP, authentication of the

host will fail. To allow such a Fibre Channel switch to connect to the port without authentication, do not

configure it for authentication by ports with CHAP.

Authentication of Ports (Performing Mutual Authentication)

When authentication of a host succeeds, the host performs authentication of the port if required by the

host (mutual authentication). In authentication of ports, when the user information (user name and secret)

specified on the port side matches that stored on the host, the host allows the host group to connect.

Configuring Fibre Channel Authentication

Enabling or Disabling Host Authentication

You can specify whether or not to perform authentication for the hosts in a host group by switching the user

authentication settings of the host groups to enable or disable. By default, user authentication is disabled.
To enable authentication for hosts in a host group:

1.

Make sure that Remote Web Console is in Modify mode.

2.

Start LUN Manager and display the Authentication window (

Figure 14

on page 31).

XP24000 LUN Manager User's Guide

49

This manual is related to the following products: