Download deploying-bna-tb

DATA CENTER
TECHNICAL BRIEF
CONTENTS
Introduction................................................................................................................................................................................3
User Access Control..................................................................................................................................................................3
Authentication...................................................................................................................................... 4
Authorization........................................................................................................................................ 6
RBAC ..........................................................................................................................................................................................6
Password Policies............................................................................................................................... 10
Secure Network Advisor Client-Server Communication.................................................................................................... 10
Securing SMI-S Communication.......................................................................................................................................... 11
Securing Network Advisor Server-to-Switch Communication........................................................................................... 12
Securing Network Advisor Server-to-Adapter Communication........................................................................................ 14
Firewall Settings..................................................................................................................................................................... 15
Network Advisor Server-to-Network Configurations................................................................................. 15
Client-Server Firewall Settings.............................................................................................................. 16
SMI-S Client Firewall Settings............................................................................................................... 17
Server-to-Network Firewall Settings....................................................................................................... 17
Miscellaneous Firewall Settings........................................................................................................... 18
Network Advisor Certificates................................................................................................................................................ 18
Truststore Certificates......................................................................................................................... 18
Keystore Certificate............................................................................................................................. 20
Keystore and Truststore Passwords...................................................................................................... 20
Server Data Storage.............................................................................................................................................................. 21
Summary................................................................................................................................................................................ 22
Deploying Brocade Network Advisor in a Secure Environment
2 of 22