Cisco MDS 9000 Series Configuration Manual page 232

About DHCHAP Authentication Modes
Procedure
Step 1
switch# configure terminal
Enters configuration mode.
Step 2 switch(config)# feature fcsp
Enables the DHCHAP in this switch.
Step 3
switch(config)# no feature fcsp
Disables (default) the DHCHAP in this switch.
About DHCHAP Authentication Modes
The DHCHAP authentication status for each interface depends on the configured DHCHAP port mode.
When the DHCHAP feature is enabled in a switch, each Fibre Channel interface or FCIP interface may be
configured to be in one of four DHCHAP port modes:
• On—During switch initialization, if the connecting device supports DHCHAP authentication, the software
• Auto-Active—During switch initialization, if the connecting device supports DHCHAP authentication,
• Auto-Passive (default)—The switch does not initiate DHCHAP authentication, but participates in
• Off—The switch does not support DHCHAP authentication. Authentication messages sent to such ports
Note
Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is performed.
Changing DHCHAP port mode for a VE link requires a port flap on both the ends.
The following table identifies the switch-to-switch authentication behavior between two Cisco MDS switches
in various modes.
Table 17: DHCHAP Authentication Status Between Two MDS Switches
Switch N DHCHAP
Modes
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
214
performs the authentication sequence. If the connecting device does not support DHCHAP authentication,
the software moves the link to an isolated state.
the software performs the authentication sequence. If the connecting device does not support DHCHAP
authentication, the software continues with the rest of the initialization sequence.
DHCHAP authentication if the connecting device initiates DHCHAP authentication.
return error messages to the initiating switch.
Switch 1 DHCHAP Modes
on auto-active auto-passive
Configuring FC-SP and DHCHAP
off