Deployment Guide

1. Open the Switch Administration window.
2. Select Show Advanced Mode.
3. Select the Security Policies tab.
4. Under Security Policies , select Ethernet IPsec or Ethernet IPsec.
5. Select the policy or policies you want to delete.
6. Select Delete.
The policy is deleted from the SA database (SADB), and is removed from the list.
Establishing authentication policies for HBAs
To establish and enable authentication policies for HBAs as the log in to a fabric, perform the following
steps.
1. Open the Switch Administration window.
2. Click Show Advanced Mode.
3. Select the Security Policies tab.
4. Select Authentication under Security Policies.
The Authentication Policy Settings window displays.
5. Under Configure Authentication Policy, do the following.
• Select the Authentication Type. The choices are FCAP, DHCHAP, or both.
• Select the Switch Authentication Policy Mode. The choices are Passive, Active, On, or Off.
• Select the Hash Type used. The choices are SHA1, SHA 256, MD5, SHA 1 and MD5, or all.
• Select the DH-Group Type. The choices are 0, 1, 2, 3, 4; 0 (DH Null option), 1 (1024 bit key), 2
(1280 bit key), 3 (1536 bit key), or 4 (2048 bit key).
• Use the Device Authentication Policy Mode selector to set the desired mode. The choices are
On, Off, or Passive.
• Click Apply.
6. If your authentication method uses a shared secret, select the Shared Secret Keys tab.
The Shared Secret Keys window displays.
7. Select Add.
The Add Shared Secret Keys dialog box displays.
8. Enter or browse to select the switch/HBA WWN or name or domain ID in the Switch or HBA WWN/
Name/Domain ID field.
9. Enter the shared secret key for the peer device (an HBA in this case) in the Peer Shared Secret and
Confirm Peer Shared Secret fields.
10.Enter the shared secret for switch in the Local Shared Secret and Confirm Local Shared Secret
fields.
11.Click Add.
An entry is added in the Switch WWN box.
12.Click OK.
13.Add more shared secrets, if needed.
Establishing authentication policies for HBAs
Web Tools Administrator's Guide 233
53-1003169-01