Chapter 44
Configuring FC-SP and DHCHAP
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Configuring DHCHAP AAA Authentication
You can configure AAA authentication to use a RADIUS or TACACS+ server group. If AAA
authentication is not configured, local authentication is used by default.
To configure the AAA authentication, see the
Displaying Protocol Security Information
Use the show fcsp commands to display configurations for the local database.
The following example shows how to display the DHCHAP configuration for the specified interface:
switch# show fcsp interface fc2/4
fc2/4:
The following example shows how to display DHCHAP statistics for the specified interface:
switch# show fcsp interface fc2/4 statistics
The following example shows how to display the FC-SP WWN of the device connected to the specified
interface:
switch# show fcsp interface fc2/1 wwn
The following example shows how to display the hash algorithm and DHCHAP groups configured in the
switch:
switch# show fcsp dhchap
The following example shows how to display the DHCHAP local password database:
switch# show fcsp dhchap database
Tip
Use the ASCII representation of the device WWN to configure the switch information on RADIUS and
TACACS+ servers.
Sample Configuration
This section provides the steps to configure the example illustrated in
Figure 44-2
Oregon
OL-16597-01
fcsp authentication mode:SEC_MODE_ON
Status: Successfully authenticated
Sample DHCHAP Authentication
Password sent by NX-5000 to MDS-9509
int fc 1/6
Password sent by MDS-9509 to NX5000
"Configuring AAA" section on page
int fc 4/5
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Sample Configuration
16-6.
Figure
44-2.
MDS-9509
44-9