beautypg.com

Changing enable authentication method, Secret – HP StorageWorks 2.32 Edge Switch User Manual

Page 160

background image

SANtegrity Security Center

160

Enabling or disabling E_port and N_port authentication

1.

Select or clear the check box for E_port or N_port authentication.

The port authentication state overrides the E_port and N_port authentication at the switch level.

Changing enable authentication method

Select an option from the Enable Authentication Method drop-down list for E_port or N_port.

If the Radius Only option is selected, and E_port or N_port authentication is enabled, the

application checks to see if the Radius server settings on the Radius tab have been set.

If not, the Radius Only and Radius then Local options do not display on the drop-down list.

Changing port authentication state for an authenticated device

1.

Select a device and choose a different port authentication state.
If the device is already in the authenticated device list, changing the port authentication state

can occur.

Changing port authentication state for a non-authenticated device with or without a CHAP

secret

1.

Select a device, and select Force Enabled or Switch Setting from the corresponding

authentication state while the E_port authentication is checked.
If the device has not been transferred to the Authenticated Devices list, Needed is displayed in

the Secret column whether the device has a CHAP Secret or not.

2.

Continue configuring multiple port authentication states.

3.

Click Apply
A message displays indicating the devices have not been put into the Authenticated Devices list

and as a result the connectivity between the devices and the switch is broken.

4.

Select Yes and the authentication is enabled between the current switch and the connected

devices with switch ports set to Enabled.
Or
Select No and return to the Devices tab where you can add the devices to the Authenticated

Devices list.

Changing port authentication state for a nonmember device (manageable) without CHAP

Secret

If the port authentication state is changed to Forced Enabled or Switch Setting from the

corresponding authentication state while the E_port authentication is checked, the Secret column

changes its display value from No to Needed.

1.

Double click the corresponding Secret column or select the device and click the right arrow

button to display the Add User dialog box.

2.

Select the CHAP secret, and click OK.
The corresponding Secret column displays Set. The device is added to the Authenticated Devices

list. The secret is populated to both the device’s local database and the current switch’s

Authenticatable list.