Table of Contents
Advertisement
•
CHAP — Select CHAP if you want to enable an initiator that tries to access the target to authenticate
using CHAP. Define the CHAP secret only if you want to use mutual CHAP authentication. If you
select CHAP, and if no CHAP target secret is defined, an error message is displayed. Click CHAP
Secret to view the Enter CHAP Secret windows. Use this window to define the CHAP secrets.
NOTE: To remove a CHAP secret, you must delete the host initiator and add it again.
Step 6: Configure CHAP Authentication On The Host
Server (Optional)
If you configured CHAP authentication in
(Optional), complete the following steps. If not, skip to
the Host
Server.
Select the set of steps in one of the following sections (Windows or Linux) that corresponds to your
operating system.
Configure CHAP Authentication On The Host Server Using Windows GUI
Version
1.
Click Start → Programs → Microsoft iSCSI Initiator or click Start → Programs → Administrative
Tools → iSCSI Initiator.
2.
If you are not using mutual CHAP authentication, go to step 4.
3.
If you are using mutual CHAP authentication, click the General tab and select Secret. At Enter a
secure secret, enter the mutual CHAP secret you entered for the storage array.
4.
Click the Discovery tab.
5.
Under Target Portals, select the IP address of the iSCSI port on the storage array and click Remove.
The iSCSI port you configured on the storage array during target discovery is not displayed.
6.
Under Target Portals, click Add and re-enter the IP address or DNS name of the iSCSI port on the
storage array (removed above).
7.
Click Advanced and set the following values on the General tab:
•
Local Adapter — Should always be set to Microsoft iSCSI Initiator.
•
Source IP — The source IP address of the host you want to connect with.
•
Data Digest and Header Digest — Optionally, you can specify that a digest of data or header
information be compiled during transmission to help with troubleshooting.
•
CHAP logon information — Enter the target CHAP authentication user name and secret you
entered (for the host server) on the storage array.
•
Perform mutual authentication — If mutual CHAP authentication is configured, select this option.
NOTE: IPSec is not supported.
If you require a discovery session failover, repeat step 5 and step 6 (in this procedure) for all iSCSI
ports on the storage array. Otherwise, single-host port configuration is sufficient.
NOTE: If the connection fails, ensure that all IP addresses are entered correctly. Mistyped IP
addresses result in connection problems.
8.
Click OK.
Step 5 Configure CHAP Authentication on the Storage Array
Step 7 Connect to the Target Storage Array From
41
Advertisement
Table of Contents
