Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

About DHCHAP Authentication Modes
The DHCHAP authentication status for each interface depends on the configured DHCHAP port mode.
When the DHCHAP feature is enabled in a switch, each Fibre Channel interface or FCIP interface may be
configured to be in one of four DHCHAP port modes:
• On—During switch initialization, if the connecting device supports DHCHAP authentication, the software
performs the authentication sequence. If the connecting device does not support DHCHAP authentication,
the link is placed in an isolated state.
• Auto-Active—During switch initialization, if the connecting device supports DHCHAP authentication,
the software performs the authentication sequence. If the connecting device does not support DHCHAP
authentication, the software continues with the rest of the initialization sequence.
• Auto-Passive (default)—The switch does not initiate DHCHAP authentication, but participates in
DHCHAP authentication if the connecting device initiates DHCHAP authentication.
• Off—The switch does not support DHCHAP authentication. Authentication messages sent to ports in
this mode return error messages to the initiating switch.
Whenever DHCHAP port mode is changed to a mode other than the Off mode, reauthentication is
performed.
Note
The following table identifies switch-to-switch authentication between two Cisco switches in various modes.
Table 89: DHCHAP Authentication Status Between Two MDS Switches
Switch 1 DHCHAP ModesSwitch N
DHCHAP
Modes
offauto-passiveauto-activeon
Link is brought down.FC-SP authentication
is performed.
FC-SP authentication
is performed.
FC-SP authentication
is performed.
on
FC-SP authentication
is not performed.
auto-Active
FC-SP authentication
is not performed.
auto-Passive
FC-SP authentication is not performed.
Link is brought down.off
Configuring the DHCHAP Mode
To configure the DHCHAP mode for a particular interface, perform this task:
Procedure
PurposeCommand or Action
Enters configuration mode.switch# configuration terminal
Step 1
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
628 OL-16597-01
Configuring FC-SP and DHCHAP
About DHCHAP Authentication Modes