<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:52" />
    <title>About the DHCHAP Password </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1666;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073510"> </a><h1 class="pTitle">
About the DHCHAP Password

</h1>
<a name="wp1073511"> </a><p class="pBody">
DHCHAP authentication in each direction requires a shared secret password between the connected 
devices. To do this, you can use one of three approaches to manage passwords for all switches in the 
fabric that participate in DHCHAP.

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1073512"> </a><li class="pSmartList1">Approach 1&#8212;Use the same password for all switches in the fabric. This is the simplest approach. 
When you add a new switch, you use the same password to authenticate that switch in this fabric. It 
is also the most vulnerable approach if someone from the outside maliciously attempts to access any 
one switch in the fabric.
</li>
<a name="wp1073513"> </a><li class="pSmartList1">Approach 2&#8212;Use a different password for each switch and maintain that password list in each 
switch in the fabric. When you add a new switch, you create a new password list and update all 
switches with the new list. Accessing one switch yields the password list for all switches in that 
fabric.
</li>
<a name="wp1073514"> </a><li class="pSmartList1">Approach 3&#8212;Use different passwords for different switches in the fabric. When you add a new 
switch, multiple new passwords corresponding to each switch in the fabric must be generated and 
configured in each switch. Even if one switch is compromised, the password of other switches are 
still protected. This approach requires considerable password maintenance by the user.
</li>
</ul></div>
<a name="wp1073515"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> All passwords are restricted to 64 alphanumeric characters and can be changed, but not deleted.

</p>
<a name="wp1073516"> </a><p class="pBodyAutonumRel">
<strong>Tip	&nbsp;&nbsp;&nbsp;</strong> We recommend using RADIUS or TACACS+ for fabrics with more than five switches. If you need to 
use a local password database, you can continue to do so using Approach 3 and using the Cisco MDS 
9000 Family DCNM-SAN to manage the password database.

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
