Configuring fibre channel authentication, Enabling or disabling host authentication – HP XP Array Manager Software User Manual
Page 49

Regardless of the setting on the Fibre Channel switch, the port performs authentication of
the Fibre Channel switch, but results in failure. The Fibre Channel switch cannot connect to
the storage system.
•
When not performing authentication of Fibre Channel switches by ports (Case D):
The Fibre Channel switch will connect to the storage system without authentication of the host,
regardless of whether or not the Fibre Channel switch is configured for authentication with CHAP.
In this case, you need not register the user information for the Fibre Channel switch on the port,
but you can register it.
During authentication of hosts, the connection result is determined depending on the combination of the
following port settings:
•
Setting of the port in the Port tree: enable ( ) or disable ( )
•
Whether or not the user information for the Fibre Channel switch that attempts to connect is
registered on the port
on page 49 shows the relationship between the combinations of port settings and the connection
results in authentication of Fibre Channel switches. Regardless of whether or not the host is configured
for authentication by Fibre Channel switches with CHAP, the connection results are as follows, unless
otherwise noted.
Table 5 Combinations of Fibre Channel settings and connection results
Port settings
Fibre
Connection results
Authentication:
at Fibre Channel
switch
User Information
for Fibre Channel
switch
Channel
switch
settings
Enable
Registered
Registered
Connected if the authentication of the
Fibre Channel switch succeeded
Enable
Registered
Not registered Failed to be authenticated and cannot
be connected
Enable
Not registered
Registered
Failed to be authenticated and cannot
be connected
Disable
---
---
Connected without authentication of the
Fibre Channel switch*
---: This item does not affect the connection results, or cannot be specified.
* If a Fibre Channel switch is configured for authentication by ports with CHAP, authentication of the
host will fail. To allow such a Fibre Channel switch to connect to the port without authentication, do not
configure it for authentication by ports with CHAP.
Authentication of Ports (Performing Mutual Authentication)
When authentication of a host succeeds, the host performs authentication of the port if required by the
host (mutual authentication). In authentication of ports, when the user information (user name and secret)
specified on the port side matches that stored on the host, the host allows the host group to connect.
Configuring Fibre Channel Authentication
Enabling or Disabling Host Authentication
You can specify whether or not to perform authentication for the hosts in a host group by switching the user
authentication settings of the host groups to enable or disable. By default, user authentication is disabled.
To enable authentication for hosts in a host group:
1.
Make sure that Remote Web Console is in Modify mode.
2.
Start LUN Manager and display the Authentication window (
XP24000 LUN Manager User's Guide
49