Table of Contents
Advertisement
Step 5: Configure CHAP Authentication On The Storage
Array (Optional)
If you are not configuring any type of CHAP, skip these steps and go to
Storage Array From The Host
NOTE: If you choose to configure mutual CHAP authentication, you must first configure target
CHAP.
In terms of iSCSI configuration, the term Target always refers to the storage array.
Configuring Target CHAP Authentication On The Storage Array
1.
From MD Storage Manager, click the iSCSI tab and then click Change Target Authentication.
Select one of the CHAP settings described in the following table.
CHAP Setting
None
None and CHAP
CHAP
2.
To configure a CHAP secret, select CHAP and select CHAP Secret.
3.
Enter the Target CHAP Secret (or Generate Random Secret). Confirm it in Confirm Target CHAP
Secret and click OK.
Although the storage array allows sizes from 12 to 57 characters, many initiators only support CHAP
secret sizes up to 16 characters (128-bit).
NOTE: A CHAP secret is not retrievable after it is entered. Ensure that you record the secret in
an accessible place. If Generate Random Secret is used, copy and paste the secret into a text
file for future reference since the same CHAP secret is used to authenticate any new host
servers you may add to the storage array. If you forget this CHAP secret, you must disconnect
all existing hosts attached to the storage array and repeat the steps in this chapter to add them
again.
4.
Click OK.
Configuring Mutual CHAP Authentication On The Storage Array
The initiator secret must be unique for each host server that connects to the storage array and must not
be the same as the target CHAP secret.
Change the initiator authentication settings in the Change Target Authentication window. Use these
options to change the settings:
•
None — Select None if you permit no initiator authentication. If you select None, any initiator can
access this target. Use this option only if you do not require secure data. However, you can select
both None and CHAP at the same time.
40
Server.
Description
This is the default selection. If None is the only selection, the storage array
allows an iSCSI initiator to log on without supplying any type of CHAP
authentication.
The storage array allows an iSCSI initiator to log on with or without CHAP
authentication.
If CHAP is selected and None is deselected, the storage array requires
CHAP authentication before allowing access.
Step 7: Connect To The Target
Advertisement
Table of Contents
