24 Installation Guide (AA-RTDWE-TE, November 2005)

Table Of Contents

Edge Switch 2/24 installation guide 87

• Preferred path—Use the Preferred Path view to specify and configure one or more ISL data paths

between multiple fabric elements. At each fabric element, a preferred path consists of a source

port, exit port, and destination Domain_ID.

• Port fencing—Use the Port Fencing view to minimize ISLs that bounce (repeatedly attempt to

establish a connection), causing disruptive fabric rebuilds. Fencing defines a bounce threshold

that, when reached, automatically blocks the disruptive E_Port.

Verify the LAN installation with the customer. If multiple products are installed or a public LAN

segment is used, network addresses must be changed to conform to the customer’s LAN addressing

scheme.

Configure security

This section describes optional product security features configured through Security menu

selections. The enhanced SANtegrity PFE key must be installed. See ”Installing PFE keys (Optional)”

on page 84 for instructions. Features include:

• Authentication Settings—The Authentication Settings view provides four pages to configure

optional SANtegrity Authentication features, including:

• User settings—Configure password-protected administrator and operator access to the

HAFM Basic and command line interfaces.

• Software settings—Configure challenge handshake authentication protocol (CHAP)

controlled management interface access (out-of-band and inband) to the product.

• Device settings—Configure a CHAP secret authentication sequence for nodes (devices)

attached to the product through E_Ports or N_ports.

• Port settings—Override product-level authentication settings and enable or disable device

communication on a per-port basis.

• Access Control List—As part of SANtegrity Authentication, use the IP Access Control List view to

configure a list of device IP addresses or a range of device IP addresses authorized to

communicate with the product.

• RADIUS—As part of SANtegrity Authentication, use the RADIUS Server view to configure up to

three remote authentication dial-in user service (RADIUS) servers. A RADIUS server stores and

authenticates passwords and CHAP secrets.

• Enterprise Fabric Mode—Use the Enterprise Fabric Mode view to enable or disable EFM. Fabric

binding is activated when EFM is enabled.

• Fabric Binding—Use the Fabric Binding view to lock parameters of a fabric in accordance with

the user configuration. Fabric binding creates a membership list of element (director or switch)

Domain_IDs and world wide names (WWNs) that can communicate with the product.

• Switch Binding—Use the Switch Binding view to create a membership list of node (device)

WWNs that can attach to the product. The specified connection policy restricts product access

through E_Ports, F_Ports, or in general (all ports).

• Port Binding—Use the Port Binding view to bind an attached device WWN to a product Fibre

Channel port.

For instructions about configuring Security, see the HAFM Basic user guide.