Users Guide

Broadcom OCM-APP-LPE-UG124-100
97
Emulex OneCommand Manager Application
User Guide
– Re-authenticate – If this setting is enabled, the FC driver can periodically initiate authentication.
– Re-auth Interval – The value, in minutes, that the FC driver uses to periodically re-initiate authentication. Valid
interval ranges are 10 to 3600 minutes. The default is 300 minutes.
– DH Priority – The priority of the five supported DH Groups (Null group, and groups 1, 2, 3, and 4) that the FC driver
presents during the DHCHAP authentication negotiation with the switch.
– Hash Priority – The priority of the supported hash algorithms (MD5 and SHAx) that the FC driver presents during
the DHCHAP authentication negotiation with the switch (default is MD5 first, then SHA1, SHA2, SHA3...).
 Restore – Click this button to return parameters to their previous settings.
 Defaults – Click this button to return parameters to their default settings.
 Apply – Click this button to apply new the parameter settings before initiating authentication.
NOTE: Clicking Defaults removes all current configuration settings, including port secrets and this switch/target
connection.
 Parameter Description / General Help area:
– This area contains a brief description of the selected parameter and the options available for the parameter.
 State area:
– This area displays the current authentication state. Possible states are Not Authenticated, Authentication In
Progress, Authentication Success, Authentication Active, and Authentication Failed.
 Initiate Authentication – Click this button after configuring parameters, and clicking the Apply button, to perform
immediate authentication.
 Set Secret – Click this button to set a new local or remote secret in ASCII or hexadecimal (binary). See
Section 7.19.3, Setting or Changing Secrets, for instructions.
After DHCHAP has been activated and configured, manually initiate authentication per adapter by clicking Initiate
Authentication or by inducing a FLOGI time in accordance with the FC-SP standard to the switch. A FLOGI can also be
caused by bringing the link between the switch and adapter down and then up (not available in read-only mode).
7.19.1 Deleting Authentication for All Ports
NOTE: The driver authentication parameter lpfc_enable_auth (Linux), lpfc_enable_auth (VMware), or
EnableAuth (Windows) must be disabled before deleting authentication for all ports. See
Section 7.17, Configuring the Driver Parameters, for instructions on changing driver parameters.
NOTE: This command deletes the authentication configuration, including secrets, from the adapter flash memory. You
must reload the driver or reboot the system to activate the new driver settings.
To delete authentication for all ports, perform these steps:
1. In the discovery-tree (Figure 4), select the adapter port whose authentication you want to delete.
2. Select the DHCHAP tab (Figure 55).
3. Click Delete Authentication For All Ports.