Cisco Nexus 5000 Series - DHCHAP Hash Algorithm; Configuring the DHCHAP Hash Algorithm

PurposeCommand or Action
Changes the DHCHAP authentication mode to auto-active for the
selected interfaces. The timeout period value (in minutes) sets how
often reauthentication occurs after the initial authentication.
fcsp auto-active timeout-period
Example:
switch(config-if)# fcsp auto-active 10
Step 6
Changes the DHCHAP authentication mode to auto-active for the
selected interfaces. Reauthentication is disabled (default).
fcsp auto-active
Example:
switch(config-if)# fcsp auto-active
Step 7
The reauthorization interval configuration is the same as
setting it to zero (0).
Note
DHCHAP Hash Algorithm
Cisco SAN switches support a default hash algorithm priority list of MD5 followed by SHA-1 for DHCHAP
authentication.
If you change the hash algorithm configuration, then change it globally for all switches in the fabric.
RADIUS and TACACS+ protocols always use MD5 for CHAP authentication. Using SHA-1 as the hash
algorithm may prevent RADIUS and TACACS+ usage, even if these AAA protocols are enabled for
DHCHAP authentication.
Caution
Configuring the DHCHAP Hash Algorithm
You can configure the hash algorithm.
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
switch# configure terminal
switch(config)#
Step 1
Configures the use of the the MD5 or SHA-1 hash
algorithm.
fcsp dhchap hash [md5] [sha1]
Example:
switch(config)# fcsp dhchap hash md5 sha1
Step 2
Reverts to the factory default priority list of the MD5
hash algorithm followed by the SHA-1 hash algorithm.
no fcsp dhchap hash sha1
Example:
switch(config)# no fcsp dhchap hash sha1
Step 3
Cisco Nexus 5000 Series NX-OS SAN Switching Configuration Guide, Release 5.2(1)N1(1)
244 OL-27583-01
Configuring FC-SP and DHCHAP
Configuring DHCHAP Authentication