Method for authenticating multiple channels within a single fibre channel link

A method of authenticating a Fibre Channel over TCP/IP connection between a first device and a second device which comprises:

• establishing a first Fibre Channel over TCP/IP connection between the first device and the second device;
• authenticating the first connection;
• establishing a second Fibre Channel over TCP/IP connection between the first device and the second device;
• sending a nonce from the first device to the second device over the second connection;
• returning the nonce received by the second device to the first device over the first connection using Switch Fabric Internal Link Services;
• comparing the nonce sent to the nonce returned;
• and,
• sending an acceptance over the first, authenticated connection from the first device to the second device using Switch Fabric Internal Link Services if the nonce sent is the same as the nonce received.

A Fibre Channel switch comprising a processor and a medium storing instructions for causing the processor to:

• establish a first Fibre Channel over TCP/IP connection between the switch and a second switch;
• authenticate the first connection;
• establish a second Fibre Channel over TCP/IP connection between the switch and the second switch;
• send a nonce to the second switch over the second connection;
• receive the nonce returned by the second switch over the first connection using Switch Fabric Internal Link Services;
• compare the nonce sent to the nonce returned;
• and,
• send an acceptance over the first, authenticated connection to the second switch using Switch Fabric Internal Link Services if the nonce sent is the same as the nonce received.

A Fibre Channel device comprising a processor and a medium storing instructions for causing the processor to:

• establish a first Fibre Channel over TCP/IP connection between the device and a second Fibre Channel device;
• authenticate the first connection;
• establish a second Fibre Channel over TCP/IP connection between the device and the second Fibre Channel device;
• send a nonce to the second Fibre Channel device over the second connection;
• receive the nonce returned by the second Fibre Channel device over the first connection using Switch Fabric Internal Link Services;
• compare the nonce sent to the nonce returned;
• and,
• send an acceptance over the first, authenticated connection to the second Fibre Channel device using Switch Fabric Internal Link Services if the nonce sent is the same as the nonce received.

A Fibre Channel device comprising a processor and a medium storing instructions for causing the processor to:

• communicate with a second Fibre Channel device using a first Fibre Channel over a TCP/IP connection between the device and the second Fibre Channel device;
• respond to a request to authenticate the first connection;
• establish a second Fibre Channel over TCP/IP connection between the device and the second Fibre Channel device;
• receive a nonce from the second Fibre Channel device transmitted via the second connection;
• return the nonce received from the second Fibre Channel device over the first connection using Switch Fabric Internal Link Services;
• and,
• receive a signal over the first connection from the second Fibre Channel device using Switch Fabric Internal Link Services indicating whether the nonce returned was the same as the nonce sent by the second Fibre Channel device.