Brocade Communications Systems CNA - Manual (Page 172)

154 Brocade Adapters Administrator’s Guide
53-1001256-01
auth
B
auth
Enables authentication configuration on a per-port basis and the ability to display authentication
status and statistics.
Synopsis bcu auth --algo <port_id> <md|sha1|ms|sm>
bcu auth --policy <port_id> {on|off}
bcu auth --secret <port_id> “secret_string”
bcu auth --show <port_id>
bcu auth --stats <port_id>
bcu auth --statsclr <port_id>
Description Configure and display authentication settings and status.
Operands --algo Sets the authentication algorithm.
port_id Specifies the ID of the port for which you want to display information.
md|sha1|ms|sm
•
MD5 - A hashing algorithm that verifies a message’s integrity using
Message Digest version 5. MD5 produces a 128-bit digest and is the required
authentication mechanism for LDAP v3 servers.
•
SHA1 - A secure hashing algorithm that computes a 160-bit message digest
for a data file that is provided as input.
•
MD5SH1 - Similar to the MD5 hashing algorithm, but used for DH-CHAP
authentication
•
SHA1MD5 - Similar to the SHA1 hashing algorithm, but used for
DH-CHAP authentication
--policy Turns authentication on or off. By default, the authentication policy is
disabled. If authentication is enabled, the port attempts to negotiate with the
switch. If the switch side does not participate in the authentication process,
the port skips the authentication process. If the switch participates in the
authentication and authentication fails, the port is placed in a link down
state.
port_id Specifies the ID of the port for which you want to set the authentication policy.
on|off Specifies the state of the authentication policy: “policy 2/1 on” means
authentication is turned on, “policy 2/1 off” means authentication is turned
off.
--secret Sets the shared secret.
Note: You cannot clear the secret.
port_id Specifies the ID of the port for which you want to set the shared secret.
secret string Specifies the secret string. The maximum length of the secret is 63 bytes. The
default secret for each interface is its pwwn without the colons; for example,
0102030405060708.
--show Displays the authentication settings and current status.