McDATA 4Gb SAN Switch for HP p-Class BladeSystem User Guide (AA-RW20B-TE, December 2005)

McDATA® 4Gb SAN Switch for HP p-Class BladeSystem user guide 83
Configuring system services
The System Services dialog provides a central location for you to enable or disable any of the external user
services such as SNMP, Secure Sockets Layer (SSL), Secure SHell (SSH), embedded switch management
application (McDATA Web Server or McDATA Element Manager), CLI, Network Time Protocol (NTP), and
Common Information Model (CIM). Select Switch > Services to display the System Services dialog.
Figure 39 System Services dialog
CAUTION: Use caution when disabling the Embedded GUI, GUI Mgmt, Telnet, SSL, and SSH, as it is
possible to disable all access to the switch.
• Embedded GUI—McDATA Web Server and McDATA Element Manager. Allows users to point a
browser at the switch and run the McDATA Web Server application; or run McDATA Element Manager
from HAFM.
• GUI Mgmt—Allows out-of-band management of the switch from the switch management application
(GUI). If disabled, the switch can not be specified as the entry switch for a fabric in the GUI, but can
still be managed through an in-band connection.
• SSL—Secure Sockets Layer. Provides secure encrypted communications between the switch
management application (GUI) and the switch. SSL must be enabled before you can configure device
security and RADIUS servers. SSL certificates are generated on the switch with the switch date/time and
validated with the workstation’s date/time. If the Switch and workstation date/time are not
synchronized, invalid certificates will be generated and prevent an SSL connection from being
established between the switch and the management application. To disable SSL when using a user
authentication RADIUS server, the RADIUS authentication order must first be set to Local.
• Telnet—CLI. Allows users to manage the switch through a Telnet CLI session. Disabling Telnet access to
the switch is not recommended.
• SSH—Secure SHell. Provides secure encrypted Telnet CLI sessions with the switch. Note that you will
have to have an SSH client running on your workstation in order to manage your switch with Telnet CLI
when SSH is enabled.
• SNMP—Simple Network Management Protocol. Allows management of the switch through third-party
applications that use SNMP.
• NTP—Network Time Protocol. Allows the switch to obtain its time and date settings from an NTP server.
Configuring all of your switches and your workstations to utilize NTP will keep their date/time settings
in sync and will prevent difficulties with SSL certificates and event logs.