Users Guide

Table Of Contents
Broadcom DRVVM-UG128-100
15
Emulex Drivers for VMware ESXi User Guide
The following information applies to the ExpressLane feature:
ExpressLane is not supported on LPe12000-series adapters.
An ExpressLane LUN must be enabled in the driver before it can be used by the Emulex HBA Manager application for
VMware vCenter. Additionally, the priority value to mark each of the ExpressLane frames must be specified to the FC
driver through the appropriate driver parameters.
The ExpressLane feature is not supported for LUNs attached to virtual ports.
For additional information, refer to the Emulex HBA Manager for VMware vCenter User Guide.
3.2.3 FC-SP-2 Authentication (DH-CHAP) Support
Fibre Channel Security Protocol (FC-SP-2) DH-CHAP is a secret-based authentication and key management protocol that
uses the CHAP algorithm augmented with an optional Diffie-Hellmann algorithm with hash priority (MD5 and SHA1).
NOTE: The following information applies to DH-CHAP support:
DH-CHAP is available only for physical ports, not for virtual ports.
The authentication driver parameters are only available on local hosts and not for any remote hosts.
Boot from SAN is not supported when DH-CHAP authentication is enabled.
DH-CHAP is not supported on FA-PWWN ports.
DH-CHAP is not supported if Dynamic D_Port is enabled.
You can configure FC-SP-2 DH-CHAP authentication between an adapter and a switch.
FC-SP-2 DH-CHAP authentication is disabled by default. To enable FC-SP-2 DH-CHAP authentication, you must pass the
lpfc_enable_auth parameter to the driver by typing the following command:
# esxcli system module parameters set -p lpfc_enable_auth=1 -m lpfc
You must reboot the system to activate the parameter.
After DH-CHAP has been activated and configured, you can manually initiate authentication per adapter. For more
information on manually initiating authentication, refer to the Emulex HBA Manager Application User Guide.
You can get, set, update, or delete a password using the Emulex HBA Manager application. For details on how to perform
these operations, refer to the Emulex HBA Manager Application User Guide.
You can also display authentication configuration using the keyval page and esxcli.
For example, in the keyval page, type the following command:
/usr/lib/vmware/vmkmgmt_keyval/vmkmgmt_keyval -i vmhba4/Emulex -g -k auth
Output similar to the following is shown:
Key 'auth': Authentication info: Authentication enabled
local WWPN 10:00:00:90:fa:c7:c2:a8 remote WWPN ff:ff:ff:ff:ff:ff:ff:ff
ff:ff:ff:ff:ff:ff:ff:ff is the switch port name.