McDATA 4314 Manual Do Utilizador

Página de 68
McDATA 4314 Fibre Channel Switch Module Installation Guide
2-10
Fabric Security
Connection Security
Connection security provides an encrypted data path for switch management 
methods. The switch supports the Secure Shell (SSH) protocol for the 
command line interface and the Secure Socket Layer (SSL) protocol for 
management applications such as EFCM BASIC and Common Information 
Module (CIM).
The SSL handshake process between the workstation and the switch involves 
the exchanging of certificates. These certificates contain the public and private 
keys that define the encryption. When the SSL service is enabled, a certificate 
is automatically created on the switch. The workstation validates the switch 
certificate by comparing the workstation date and time to the switch 
certificate creation date and time. For this reason, it is important to 
synchronize the workstation and switch with the same date, time, and time 
zone. The switch certificate is valid 24 hours before its creation date and 365 
days after its creation date. If the certificate should become invalid, refer to 
the Create command in the McDATA 4314 Command Line Interface Guide for 
information about creating a certificate.
Consider your requirements for connection security: for the command line 
interface (SSH), management applications such as EFCM BASIC (SSL), or 
both. If SSL connection security is required, also consider using the Network 
Time Protocol (NTP) to synchronize workstations and switches.
Refer to System keyword of the Set Setup command in the McDATA 4314 
Command Line Interface Guide
 for information about enabling the NTP 
client on the switch and configuring the NTP server.
Refer to the Set command in the McDATA 4314 Command Line Interface 
Guide
 for information about setting the time zone.