HP XP7 Provisioning for Open Systems User Guide (H6F56-96009)

During authentication of hosts, the connection result is determined depending on the combination
of the following port settings:
• Setting of the port in the Port tree: enable ( ) or disable ( )
• Whether the user information of the fabric switch that attempts to connect is registered on the
port
fabric switch settings and connection results
The following table shows the relationship between the combinations of port settings and the
connection results in authentication of fabric switches. Unless otherwise noted, connection results
are as described regardless of whether the host is configured for authentication by fabric switches
with CHAP.
Connection resultsfabric switch
settings
Port Settings
User information of
fabric switch
Authentication at fabric
switch
Connected if the authentication of the fabric switch
succeeded
RegisteredRegisteredEnabled
Failed to be authenticated and cannot be connectedNot registeredRegisteredEnabled
Failed to be authenticated and cannot be connectedRegisteredNot registeredEnabled
Connected without authentication of the fabric
switch
------Disabled
If a fabric switch is configured for authentication
by ports with CHAP, authentication of the host will
fail. To allow such a fabric switch to connect to the
port without authentication, do not configure it for
authentication by ports with CHAP.
---: This item does not affect the connection results, or cannot be specified.
Mutual authentication of ports
If mutual authentication is required, when authentication of a host is successful, the host in return
authenticates the port. In authentication of ports, when user information (user name and secret)
specified on the port side matches with that stored on the host, the host allows the host group to
connect.
Fibre channel authentication
Enabling or disabling host authentication on a host group
You can specify whether to authenticate hosts on each host group. Change the user authentication
settings of host groups to enable or disable authentication of hosts. By default, user authentication
is disabled.
Remote Web Console secondary windows must be defined for use in advance. When you select
Modify from the Authentication secondary window to enable or disable host authentication, other
users or programs are prevented from changing storage system settings. When you close the
secondary window, Modify mode is released. For more information on Remote Web Console
secondary windows and Modify mode, see the HP XP7 Remote Web Console User Guide.
Procedure 23 To enable host authentication on a host group
1. On the menu bar, select Actions, Port/Host Group, and then Authentication.
2. In the Authentication window, click to change to Modify mode.
Setting fibre channel authentication 191