HP StorageWorks Fabric Interoperability: Merging Fabrics Based on M-series and B-series Fibre Channel Switches Application Notes (AA-RUQQL-TE, November 2009)
Table 11 Switch connection when all secrets are correct
M-series Authentication Policy
setting: Off
M-series Authentication Policy
setting: On
B-series Authentication Policy
setting
Yes
2
Yes
1
Passive
Yes
3
Yes
1
Active
Yes
3
Yes
1
On
Yes
2
No
4
Off
1
Connected with two-way authentication; both sides of the connection perform Authentication (Fabric builds normally).
2
Connected without authentication (Fabric builds normally).
3
Connected with one-way authentication; only one of connected switches performs Authentication (Fabric builds normally).
4
E_Port does not connect (Authentication Rejected). When the B-series switch generates the reject, it disables the B-series port.
When the M-series switch generates the reject, it enters an invalid attachment state.
Switch authentication policy when the secrets are not correct
Table 12 and Table 13 show the connection status for cases when authentication secrets are incorrect.
Table 12 shows the E_Port connection status when the B-series switch does not have the correct peer
secret for the M-series switch.
Table 12 Switch connection when the B-series switch has an incorrect peer secret for the M-series
switch
M-series Authentication Policy
setting: Off
M-series Authentication Policy
setting: On
B-series Authentication Policy
setting
Yes
2
No
1
Passive
No
1
No
1
Active
No
1
No
1
On
Yes
2
No
1
Off
1
E_Port does not connect (Authentication Rejected). When the B-series switch generates the reject, it disables the B-series port.
When the M-series switch generates the reject, it enters an invalid attachment state.
2
Connected without authentication (Fabric builds normally).
When B-series secrets are incorrect, if the B-series switch is in Active or On mode, and the M-series
switch is Off, the E_Port does not connect because the B-series switch rejects the authentication based
on the secret mismatch. However, Table 13 shows the E_Port connection status when the M-series
switch does not have the correct peer secret for the B-series switch. In the same condition, when the
B-series switch is in Active or On mode, and the M-series switch is Off, the E_Port connects (one-way
authentication) because the M-series switch will not perform authentication. The fact that the secret is
wrong is insignificant.
26