Table of Contents
Advertisement
Configure CHAP Authentication On The Host Server Using Windows Server
Core Version
1.
Set the iSCSI initiator services to start automatically (if not already set): sc \\<server_name>
config msiscsi start=auto.
2.
Start the iSCSI service (if necessary): sc start msiscsi.
3.
If you are not using mutual CHAP authentication, go to step 5.
4.
Enter the mutual CHAP secret you entered for the storage array: iscsicli CHAPSecret
<secret>.
5.
Remove the target portal that you configured on the storage array during target discovery:
iscsicli RemoveTargetPortal <IP_address> <TCP_listening_port>.
6.
Add the target portal with CHAP defined: iscsicli QAddTargetPortal
<IP_address_of_iSCSI_port_on_storage_array> [CHAP_username] [CHAP_password].
where, [CHAP_username] is the initiator name and [CHAP_password] is the target CHAP secret.
If you require a discovery session failover, repeat step 5 for all iSCSI ports on the storage array.
Otherwise, single-host port configuration is sufficient.
Configuring CHAP Authentication Using Linux 6 and SUSE Linux Enterprise
Server 11
1.
To enable CHAP (optional), the following line needs to be enabled in your /etc/iscsi/iscsid.conf file:
node.session.auth.authmethod = CHAP
2.
To set a user name and password for CHAP authentication of the initiator by the target(s), edit the
following lines:
node.session.auth.username = <iscsi_initiator_username>
node.session.auth.password = <CHAP_initiator_password>
3.
If you are using Mutual CHAP authentication, you can set the user name and password for CHAP
authentication of the target(s) by the initiator by editing the following lines:
node.session.auth.username_in=<iscsi_target_username>
node.session.auth.password_in =<CHAP_target_password>
4.
To set up discovery session CHAP authentication, first uncomment the following line:
discovery.sendtargets.auth.authmethod = CHAP
5.
Set a user name and password for a discovery session CHAP authentication of the initiator by the
target(s) by editing the following lines:
discovery.sendtargets.auth.username =<iscsi_initiator_username>
discovery.sendtargets.auth.password =<CHAP_initiator_password>
6.
To set the user name and password for discovery session CHAP authentication of the target(s) by the
initiator for Mutual CHAP, edit the following lines:
discovery.sendtargets.auth.username = <iscsi_target_username>
discovery.sendtargets.auth.password_in = <CHAP_target_password>
7.
The final configuration contained in the /etc/iscsi/iscsid.conf file may look like this:
node.session.auth.authmethod = CHAP
node.session.auth.username = iqn.2005-
node.session.auth.password = password_1
node.session.auth.username_in= iqn.1984-
node.session.auth.password_in = test1234567890
discovery.sendtargets.auth.authmethod = CHAP
discovery.sendtargets.auth.username = iqn.2005-
42
03.com.redhat01.78b1b8cad821
05.com.dell:powervault.123456
Advertisement
Table of Contents
