user manual

9 – Device Security Configuration
Managing Groups
9-14 59183-01 A
S
9.6.6
Modify a Group Member
Modifying a group member involves changing the member attributes. The
member attributes define the authentication method, encryption methods, secrets,
and fabric binding, depending on the group type.
 For ISL member attributes, refer to Table 13-1.
 For Port member attributes, refer to Table 13-2.
 For MS member attributes, refer to Table 13-3.
Enter the Group Edit command to change the attributes of a group member:
SANbox #> admin start
SANbox (admin) #> security edit
SANbox (admin-security) #> group edit G1 10:00:00:c0:dd:00:90:a3
A list of attributes with formatting and current values will follow.
Enter a new value or simply press the ENTER key to accept the current value.
If you wish to terminate this process before reaching the end of the list
press 'q' or 'Q' and the ENTER key to do so.
Group Name g1
Group Type ISL
Group Member 10:00:00:c0:dd:00:90:a3
Authentication (None / Chap) [None] chap
PrimaryHash (MD5 / SHA-1) [MD5 ] sha-1
PrimarySecret (40 hex or 20 ASCII char value) [ ] 12345678901234567890
SecondaryHash (MD5 / SHA-1 / None) [None] md5
SecondarySecret (32 hex or 16 ASCII char value) [ ] 1234567890123456
Binding (domain ID 1-239, 0=None) [3 ]
Finished configuring attributes.
To discard this configuration use the security cancel command.
9.6.7
Remove Members from a Group
Enter the Group Remove command to remove a member from a group as shown
in the following example:
SANbox (admin-security) #> group remove group_1 10:00:00:c0:dd:00:90:a3