Administrator Guide

Fabric OS Administrator’s Guide 687
53-1002920-02
SCP
configuration for uploads and downloads
, 197
described
, 196
for certificates
, 202
protocol, described
, 195
secure protocol
, 196
SCR, defined
, 53
secAuthSecret command
, 249, 250, 453
secCertUtil command
, 201, 202, 203, 252, 253, 271,
650
secModeEnable command
, 229
secPolicyAbort command
, 234
secPolicyActivate command
, 233, 236, 237, 264
secPolicyAdd command
, 234
secPolicyCreate command
, 236, 240, 243
secPolicyDelete command
, 233, 239, 240
secPolicyFCSMove command
, 237
secPolicyRemove command
, 234
secPolicySave command
, 240
secPolicyShow command
, 233
secret key pair
communicating
, 249
for DH-CHAP
, 249
length
, 249
setting
, 250
viewing list of
, 249
secure copy protocol. See: SCP.
Secure Fabric OS policies
, 232
secure LDAP
, 168
secure protocol
HTTPS
, 196
items needed to deploy
, 196
SCP
, 196
SNMPv1
, 196
SNMPv2
, 196
SNMPv3
, 196
SSHv2
, 196
Secure Shell protocol. See: SSH.
Secure Sockets Layer protocol. See: SSL.
security
AUTH policy
, 243
browser support
, 200
certificates
, 196
encryption and SSL
, 200
IAS remote access policies
, 178
IP policy rules
, 258
key generation
, 201
management interface
, 266–275
obtaining certificates
, 203
policies, ACL
, 231
protocols supported
, 195
public key authentication
, 198
root certificates in Firefox
, 205
root certificates in Internet Explorer
, 205
root certificates in Java plugin
, 205
secure protocols, supported
, 196
SSL certificates
, 196
tunnel creation
, 272–275
zoning and
, 371
Security Association Database (SADB), described
, 269
security associations
, 269
flushing
, 275
IPsec and
, 269
security certificates. See: certificates or root certificates.
security considerations for FA-PWWN
, 483
security policies
, 231–275
security protocols
, 195–196
security scenarios
, 196
serial number, location on switch
, 40
serial port connection
, 58
serial port, console session
, 58
Server Application Optimization. See: SAO.
sessions, maximum allowed
, 154
setContext command
, 125, 333, 334
setting
changing passwords
, 64
chassis configurations
, 95
chassis management IP interface
, 68
date
, 72
default zone mode
, 495
fabric-wide consistency policy
, 264
mask for end-to-end monitors
, 555
port speeds
, 94
QoS zone-based traffic prioritization
, 424
QoS zone-based traffic prioritization over FC routers
,
426
static ethernet IP address
, 68
switch date and time
, 72
time
, 72
time zone
, 73
time zone interactively
, 73
settings, configuration
, 277–287
shared ISL. See: extended ISL.
shared secrets on Access Gateway
, 250
shelf life of a universal temporary license
, 532
shutdown
Backbone
, 81
switch
, 80
SID/DID traffic prioritization
, 415
signed firmware
, 301