Target Chap; Mutual Chap; Chap Definitions; Step 5: Configure Chap Authentication On The Storage Array (Optional) - Dell PowerVault MD3800i Series Deployment Manual

Target CHAP

In target CHAP, the storage array authenticates all requests for access issued by the iSCSI initiator(s) on
the host server using a CHAP secret. To set up target CHAP authentication, you must enter a CHAP secret
on the storage array, then configure each iSCSI initiator on the host server to send that secret each time it
attempts to access the storage array.

Mutual CHAP

In addition to setting up target CHAP, you can set up mutual CHAP in which both the storage array and
the iSCSI initiator authenticate each other. To set up mutual CHAP, configure the iSCSI initiator with a
CHAP secret that the storage array must send to the host sever in order to establish a connection. In this
two-way authentication process, both the host server and the storage array send information that the
other must validate before a connection is allowed.
CHAP is an optional feature and is not required to use iSCSI. However, if you do not configure CHAP
authentication, any host server connected to the same IP network as the storage array can read from and
write to the storage array.
NOTE: When using CHAP authentication, you should configure it on both the storage array (using
MDSM) and the host server (using the iSCSI initiator) before preparing virtual disks to receive data. If
you prepare disks to receive data before you configure CHAP authentication, you lose visibility to
the disks once CHAP is configured.

CHAP Definitions

To summarize the differences between target CHAP and mutual CHAP authentication, see the following
table:
Table 9. CHAP Types Defined
CHAP Type
Target CHAP
Mutual CHAP
Step 5: Configure CHAP Authentication on the Storage
Array (Optional)
If you are configuring CHAP authentication of any kind (either target-only or target and mutual), you
must complete this step.
If you are not configuring any type of CHAP, skip these steps and go to "Connect to the Target Storage
Array From the Host Server".
NOTE: If you choose to configure mutual CHAP authentication, configure target CHAP first.
Description
Sets up accounts that iSCSI initiators use to
connect to the target storage array. The target
storage array then authenticates the iSCSI initiator.
Applied in addition to target CHAP, mutual CHAP
sets up an account that a target storage array uses
to connect to an iSCSI initiator. The iSCSI initiator
then authenticates the target.
45