About Dhchap Authentication Modes; Configuring The Dhchap Mode - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Chapter 45 Configuring FC-SP and DHCHAP
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

About DHCHAP Authentication Modes

The DHCHAP authentication status for each interface depends on the configured DHCHAP port mode.
When the DHCHAP feature is enabled in a switch, each Fibre Channel interface or FCIP interface may
be configured to be in one of four DHCHAP port modes:
•
•
•
•
Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is
Note
performed.
Table 45-1
various modes.
Table 45-1
Switch N
DHCHAP
Modes
on
auto-Active
auto-Passive
off

Configuring the DHCHAP Mode

To configure the DHCHAP mode for a particular interface using Fabric Manager, follow these steps:
Step 1 Expand Switches, expand Interfaces and then select FC Physical.
You see the interface configuration in the Information Pane.
Click the FC-SP tab.
Step 2
You see the FC-SP (DHCHAP) configuration in the Information pane shown in
OL-17256-03, Cisco MDS NX-OS Release 4.x
On—During switch initialization, if the connecting device supports DHCHAP authentication, the
software performs the authentication sequence. If the connecting device does not support DHCHAP
authentication, the software moves the link to an isolated state.
Auto-Active—During switch initialization, if the connecting device supports DHCHAP
authentication, the software performs the authentication sequence. If the connecting device does not
support DHCHAP authentication, the software continues with the rest of the initialization sequence.
Auto-Passive (default)—The switch does not initiate DHCHAP authentication, but participates in
DHCHAP authentication if the connecting device initiates DHCHAP authentication.
Off—The switch does not support DHCHAP authentication. Authentication messages sent to such
ports return error messages to the initiating switch.
identifies the switch-to-switch authentication behavior between two Cisco MDS switches in
DHCHAP Authentication Status Between Two MDS Switches
Switch 1 DHCHAP Modes
on
FC-SP
authentication is
performed.
Link is brought
down.
auto-active auto-passive
FC-SP authentication FC-SP authentication
is performed. is performed.
FC-SP authentication
is not performed.
FC-SP authentication is not performed.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
DHCHAP
off
Link is brought
down.
FC-SP
authentication is
not performed.
Figure 45-3.
45-5