SVS200 (T1714-96008, June 2006)

LUN Configuration and Security Manager XP user guide for the XP12000/XP10000/SVS200 47

Host D is attached to host group 2, which does not perform authentication of hosts. Therefore, Host D can

connect to the array without authentication.

Authentication of Fibre Channel switches

When a host attempts to connect to the array, the connection results of the authentication of the Fibre

Channel switch differs depending on the Fibre Channel switch setting related to each port. Figure 11

illustrates the relationship between Fibre Channel switch settings and the connection results. The Fibre

Channel switch authentication setting is independent from the host authentication setting.

Figure 11 Authentication of Fibre Channel switches

Case A to Case D in Figure 11 are explained as follows:

• Case A through Case C: When performing authentication of Fibre Channel switches by ports

• Case A: If the Fibre Channel switch’s user information is registered on the port, and authentication

of the Fibre Channel switch is enabled

Each port authenticates the Fibre Channel switch. If the authentication of the Fibre Channel switch

succeeds, either of the following actions occur:

• When the Fibre Channel switch is configured for mutual authentication, processing goes to

authentication of the port.

• When the Fibre Channel switch is not configured for mutual authentication, the Fibre Channel

switch connects to the array.

If the port’s Fibre Channel switch is not configured for authentication with CHAP, the authentication

fails and the Fibre Channel switch cannot connect to the array.

• Case B: If the Fibre Channel switch’s user information is registered on the port, but authentication

of the Fibre Channel switch is disabled