FW 07.01.02/HAFM SW 08.06.00 HP StorageWorks Edge Switch Release Notes (AA-RTDZH-TE, August 2005)

TheZoneFlexParfeatureisavailableinbothOpenFabric1.0andHomogeneous

Fabric 1.0 Interop modes, as well as in environments with loop-attached devices. In

Homogeneous Fabric 1.0 mode, the default zone is treated like any other zone, and

RSCNs are sent only to the affected devices if the default zone is enabled or disabled. A

PFE key is not required for the Zone FlexPar feature, and it can be enabled or disabled

through CLI for a speciﬁc switch. When upgrading to ﬁ rmware 07.01.02-4 or installing

anewswitchwithﬁrmware 07.01.02-4 the feature is enabled by default, allowing it

to work imm e diately. If the Zone FlexPar feature is not enabled on all switches in the

fabric, the restricted RSCN distribution only applies for devices a ttached to switches

with the feature enabled.

Enhanced SAN

tegritySecuritySuite

SANtegrity Se

curity Suite enhanced features include authentication support for device

switch c onnections and managem ent interfaces. The Secure Access features

are include

d as a standard part of the SANtegrity Security Suite in ﬁrmware 0 7.01.02–4.

Standard features

The following SANtegrity features do not require a license or SANtegrity Binding.

• CHAP Authentication for HAFM/SWAPI—Thisprovidesauthenticationof

connections from the HAFM appliance service processor and SWAPI Direct

Connect. This ensures that requested HA F M management sessions or SWAPI

Direct Connect sessions are from a trusted source .

• Encryption of Passwords and Secrets Shared with HAFM—All secrets and

password information are passed in encr ypted format for greater security.

This prevents “snooping” of Ethernet conne ction to capture user login and

authentication secret information.

• RA DIUS Server Support—This provides support for IETF RADIUS (Remote

Authentication Dial In User Service) protocol for password authentication.

Firmware 0 7.01.02-4 allows users to conﬁgure settings for using a RADIUS

server. RADIUS provides centralized authentication services for multiple devices

on a network. This means that several switches can be conﬁgured to use a

single RADIUS server.

• Prompted Change of EWS and CLI Passwords from Default—This prompts users

to modif y the password settings for both the CLI and EWS interfaces the ﬁrst time

they log in using either of these interfaces.

• RBAC Phase I: Enhanced User Rights Conﬁguration—RBAC is role based access

control. This is the ﬁrst phase of more comprehensive role-based access control

planned for the CLI and EWS interfaces. Multiple users can now be conﬁgured

for EWS or CLI, or both, through either interface. This allows users to conﬁgure

additional user name/password combinations.

• SSH for CLI—Secure Shell (SSH) provides an encrypted connection, as an

alternative to Telnet, to secure CLI acc ess to switches and directors.