To Next Page

To Previous Page

Fabric OS Administrator’s Guide 315

53-1002446-01

Configuring encryption and compression

3. Enter the authUtil command to set the switch policy mode to Active or On:

authutil --policy -sw active

or:

authutil --policy -sw on

4. Enable the DH-CHAP authentication protocol:

authutil --set -a dhchap

or:

authutil --set -a all

5. Enable authentication with DH group 4 or “*”:

authutil --set -g 4

DH Group was set to 4.

authutil --set -g "*"

DH Group was set to 0,1,2,3,4.

For additional information about establishing DH-CHAP secrets, see “Secret key pairs for DH-CHAP”

on page 149.

For additional information about configuring DH-CHAP authentication for E_Ports, see

“Authentication policy for fabric elements” on page 143.

Configuring encryption

NOTE

Before performing this procedure, you must authenticate the port as described in “Configuring and

enabling authentication” on page 314. It is also recommended that you check for port availability

using the portEncCompShow command. See “Viewing the encryption and compression

configuration” on page 313 for details.

To configure encryption on a port, follow these steps:

1. Connect to the switch and log in using an account with secure admin permissions, or an

account with OM permissions for the EncryptionConfiguration RBAC class of commands.

2. Disable the port on which you want to configure encryption. Use the portDisable command.

3. Enter the portCfgEncrypt

--enable command.

This example enables encryption on port 21 on a Brocade 6510 switch:

portcfgencrypt --enable 21

This example enables encryption on port 15 of an FC16-32 blade in slot 9 of an enterprise

class platform:

portcfgencrypt --enable 9/15

4. Enable the port with the portEnable command.

After manually enabling the port, the new configuration becomes active.

HP SN3000B User Manual

Other manuals for HP SN3000B