McDATA 4314 Installation Guide download pdf (Page 30)

McDATA 4314 Fibre Channel Switch Module Installation Guide

2-10

Fabric Security

Connection Security

Connection security provides an encrypted data path for switch management

methods. The switch supports the Secure Shell (SSH) protocol for the

command line interface and the Secure Socket Layer (SSL) protocol for

management applications such as EFCM BASIC and Common Information

Module (CIM).

The SSL handshake process between the workstation and the switch involves

the exchanging of certificates. These certificates contain the public and private

keys that define the encryption. When the SSL service is enabled, a certificate

is automatically created on the switch. The workstation validates the switch

certificate by comparing the workstation date and time to the switch

certificate creation date and time. For this reason, it is important to

synchronize the workstation and switch with the same date, time, and time

zone. The switch certificate is valid 24 hours before its creation date and 365

days after its creation date. If the certificate should become invalid, refer to

the Create command in the McDATA 4314 Command Line Interface Guide for

information about creating a certificate.

Consider your requirements for connection security: for the command line

interface (SSH), management applications such as EFCM BASIC (SSL), or

both. If SSL connection security is required, also consider using the Network

Time Protocol (NTP) to synchronize workstations and switches.

• Refer to System keyword of the Set Setup command in the McDATA 4314

Command Line Interface Guide for information about enabling the NTP

client on the switch and configuring the NTP server.

• Refer to the Set command in the McDATA 4314 Command Line Interface

Guide for information about setting the time zone.

1 2 ... 25 26 27 28 29 30 31 32 33 34 35 ... 67 68

No comments

McDATA 4314 Installation Guide Page 30