958-000288-010, August 2005)

restricted to only those devices sharing at least one common zone with the device that

changed. Th is way, only devices that are impacted by the change in connectivity

receive RSCNs.

TheZoneFlexParfeatureisavailableinbothOpenFabric1.0andHomogeneous

Fabric 1.0 Interop modes, as well as in environments with loop-attached devices. In

Homogeneous Fabric 1.0 mode, the default zone is treated like any other zone, and

RSCNs are sent only to the a ffected devices if the default zone is enabled or disabled. A

PFE key is not required for the Zone FlexPar feature, and it can be enabled or disabled

through CLI for a speci ﬁcswitch. Whenupgradingtoﬁrmware 07.00.00 or installing

anewswitchwithﬁrmware 07.00.00 the feature is enabled by default, allowing it to

work immediately. If the Zone FlexPar feature is not enabled on all switches in the

fabric, the restricted RSC N distribution only applies for devices a ttached to switches

with the feature enabled.

Enhanced SAN

tegritySecuritySuite

SANtegrity S

ecurity Suite enhanced features include authentication support for device

rswitch connections and m anag em ent interfaces. The Secure Access features

are include

d as a standard part of the SANtegrity Securit y Suite in ﬁrmware 07.00.00.

Standard features

The following SANtegrity features do not require a license or SANtegrity Binding.

• CHAP Authentication for HAFM/SWAPI—Thisprovidesauthenticationof

connections from the H AFM appliance service processor and SWAPI Direct

Connect. This ensures that requested HAFM m a n agem ent sessio ns or SWAPI

Direct Connect sessions are from a trusted source.

• Encryption of Passwords and Secrets Shared with HAFM—All secrets and

password information are passed in encrypted format for greater securit y.

This prevents “snoo ping” of Ethernet connection to captu re user login and

authentication secret information.

• RA DIUS Server Support —This provides support for IETF R A D IUS (Remote

Authentication Dial In User Service) protocol for password authentication.

Firmware 07.00.00 allows users to conﬁgure settings for using a RADIUS server.

RADIUS provides centralize d authentication services for multiple devices on a

network. This means that several switches can be conﬁ guredtouseasingle

RADIUS server.

• Prompted Change of EWS and CLI Passwords from Default—This prompts users

to modify the password settings for both the CLI and EWS interfaces the ﬁrst time

they log i n using either of these interfaces.

• RBAC Phase I: Enhanced User Rights Conﬁguration—RBAC is role based access

control. This is the ﬁ rst phase of more comprehensive role-based access control

planned for the CLI and EWS interfaces. Mu ltiple users can now be conﬁgured

for EWS or CLI, or both, through either interface. This allows users to c onﬁgure

additional user name/password combinations.