Cisco Nexus 5000 Series Switch CLI Software Configuration Guide, NX-OS 4.0(1a)N1 (OL-16597-01, January 2009)

Send feedback to [e-mail]
44-10
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
OL-16597-01
Chapter 44 Configuring FC-SP and DHCHAP
Sample Configuration
To configure the authentication setup shown in Figure 44-2, perform this task:
Step 1 Obtain the device name of the Cisco Nexus 5000 Series switch in the fabric. The Cisco Nexus 5000
Series switch in the fabric is identified by the switch WWN.
switch# show wwn switch
Switch WWN is 20:00:00:05:30:00:54:de
Step 2 Explicitly enable DHCHAP in this switch.
Note When you disable DHCHAP, all related configurations are automatically discarded.
switch(config)# fcsp enable
Step 3 Configure a clear text password for this switch. This password will be used by the connecting device.
switch(config)# fcsp dhchap password rtp9216
Step 4 Configures a password for another switch in the fabric that is identified by the switch WWN device
name.
switch(config)# fcsp dhchap devicename 20:00:00:05:30:00:38:5e password rtp9509
Step 5 Enable the DHCHAP mode for the required Fibre Channel interface.
Note Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is
performed.
switch(config)# interface fc2/4
switch(config-if)# fcsp on
Step 6 Verify the protocol security information configured in this switch by displaying the DHCHAP local
password database.
switch# show fcsp dhchap database
DHCHAP Local Password:
Non-device specific password:*******
Other Devices' Passwords:
Password for device with WWN:20:00:00:05:30:00:38:5e is *******
Step 7 Display the DHCHAP configuration in the Fibre Channel interface.
switch# show fcsp interface fc2/4
fc2/4
fcsp authentication mode:SEC_MODE_ON
Status:Successfully authenticated
Step 8 Repeat these steps on the connecting MDS 9509 switch.
MDS-9509# show wwn switch
Switch WWN is 20:00:00:05:30:00:38:5e
MDS-9509(config)# fcsp enable
MDS-9509(config)# fcsp dhchap password rtp9509
MDS-9509(config)# fcsp dhchap devicename 20:00:00:05:30:00:54:de password rtp9216
MDS-9509(config)# interface fc 4/5
MDS-9509(config-if)# fcsp on
MDS-9509# show fcsp dhchap database
DHCHAP Local Password:
Non-device specific password:*******