HP StorageWorks Fabric Interoperability: Merging Fabrics Based on M-series and B-series Fibre Channel Switches Application Notes (AA-RUQQL-TE, November 2009)

Authentication of EX_Port, VE_Port, and VEX_Port connections
VE_Port Authentication is the same as E_Port Authentication. For information on authenticating E_Ports,
see “E_Port Authentication between B-series and M-series switches” on page 24.
EX_Ports and VEX_Ports both run authentication in Passive mode. This means these ports do not initiate
authentication, but they do respond to authentication requests initiated by the connecting switch.
Changing the switch Authentication Policy mode does not affect the authentication function of EX_Ports;
they remain in Passive mode.
If you connect an M-series switch with the Authentication Policy set to On to an EX_Port in McDATA
Open Fabric mode or in McDATA Fabric mode, authentication is the same as when connecting an
M-series switch to a B-series switch in Passive mode. The authenticated connection is successful if the
M-series switch has the correct secret for the B-series switch and the B-series switch has the correct
secret for the M-series switch.
NOTE:
On a B-series switch, E_Port and EX_Port secrets are configured the same way. However, HP
recommends that the front domain WWN be used to install the shared secret on the E_Port side.
M-series switches do not support VE_Port or VEX_Port connections; any configurations with these port
types are B-series-only configurations. However, both VE_Ports and VEX_Ports support McDATA interop
mode.
Authentication of VE_Port-to-VE_Port connections
Although running authentication for VE_Ports and E_Ports is the same, with VE_Ports, both sides of
the connection are on the B-series switches. Table 15 lists the switch authentication policy for
VE_Port-to-VE_Port connections when all the secrets are correct.
Table 15 VE_Port-to-VE_Port Authentication Policy connections with correct switch secrets
OffOnActivePassive
B-series switch
nl
VE_ to VE_Port
Yes
1
Yes
2
Yes
2
Yes
1
Passive
No
3
Yes
2
Yes
2
Yes
2
Active
No
3
Yes
2
Yes
2
Yes
2
On
Yes
1
No
3
No
3
Yes
1
Off
1
Connected without authentication (Fabric builds normally).
2
Connected with two-way authentication; both sides of the connection perform Authentication (Fabric builds normally).
3
E_Port does not connect (Authentication Rejected). When the B-series switch generates the reject, it disables the B-series port.
When the M-series switch generates the reject, it enters an invalid attachment state.
28