Dell POWEREDGE M1000E User Manual

Page 93

Fabric OS Command Reference

53-1002746-01

authUtil

To set the Device policy to passive mode:

switch:admin> authutil --policy -dev passive
Warning: Activating the authentication policy requires
DH-CHAP secrets on both switch and device. Otherwise,
the F-port will be disabled during next F-port
bring-up.
ARE YOU SURE (yes, y, no, n): [no] y
Device authentication is set to PASSIVE

To set the device authentication policy to "on" mode:

switch:admin> authutil --policy -dev on
Warning: Activating the authentication policy requires
DH-CHAP secrets on both switch and device. Otherwise,
the F-port will be disabled during next F-port
bring-up.
ARE YOU SURE (yes, y, no, n): [no] y
Device authentication is set to ON
2008/03/24-23:13:06, [AUTH-1003], 112,, INFO, Stealth_3,
Device authentication type has been successfully set to ON

To start authentication on E/F_Ports 2, 3, and 4:

switch:admin> authutil --authinit 2,3,4
Warning: Initiating the authentication requires either DH-CHAP
secrets or PKI certificates depending on the protocol selected.
Failed authentication may result in traffic disruption.
Authentication will not be initiated on encrypted ports.
ARE YOU SURE (yes, y, no, n): [no]y

To disable md5 hash type for FIPS configuration:

switch:admin> authutil --show
AUTH TYPE HASH TYPE GROUP TYPE
--------------------------------------
fcap,dhchap sha1,md5 1

Switch Authentication Policy: PASSIVE
Device Authentication Policy: OFF

switch:admin> authutil --set -h sha1
Hash is set to sha1.

switch:admin> authutil --show
AUTH TYPE HASH TYPE GROUP TYPE
--------------------------------------
fcap,dhchap sha1 1

Switch Authentication Policy: PASSIVE
Device Authentication Policy: OFF