Configuring Chap Authentication Using Linux; Configure Chap Authentication On The Host Server Using Suse Linux Enterprise Server Gui - Dell PowerVault MD3800i Series Deployment Manual

Storage arrays
Hide thumbs Also See for PowerVault MD3800i Series:
Table of Contents

Advertisement

5.
Remove the target portal that you configured on the storage array during target discovery:
iscsicli RemoveTargetPortal <IP_address> <TCP_listening_port>.
6.
Add the target portal with CHAP defined: iscsicli QAddTargetPortal
<IP_address_of_iSCSI_port_on_storage_array> [CHAP_username] [CHAP_password].
where, [CHAP_username] is the initiator name and [CHAP_password] is the target CHAP secret.
If you require a discovery session failover, repeat step 5 for all iSCSI ports on the storage array.
Otherwise, single-host port configuration is sufficient.

Configuring CHAP Authentication Using Linux

1.
To enable CHAP (optional), the following line needs to be enabled in your /etc/iscsi/iscsid.conf file:
node.session.auth.authmethod = CHAP.
2.
To set a user name and password for CHAP authentication of the initiator by the target(s), edit the
following lines: node.session.auth.username = <iscsi_initiator_username>
node.session.auth.password = <CHAP_initiator_password>.
3.
If you are using Mutual CHAP authentication, you can set the user name and password for CHAP
authentication of the target(s) by the initiator by editing the following lines:
node.session.auth.username_in= <iscsi_target_username>
node.session.auth.password_in = <CHAP_target_password>.
4.
To set up discovery session CHAP authentication, first uncomment the following line:
discovery.sendtargets.auth.authmethod = CHAP.
5.
Set a user name and password for a discovery session CHAP authentication of the initiator by the
target(s) by editing the following lines: discovery.sendtargets.auth.username =
<iscsi_initiator_username> discovery.sendtargets.auth.password =
<CHAP_initiator_password>.
6.
To set the user name and password for discovery session CHAP authentication of the target(s) by the
initiator for Mutual CHAP, edit the following lines: discovery.sendtargets.auth.username =
<iscsi_target_username> discovery.sendtargets.auth.password_in =
<CHAP_target_password>.
7.
The final configuration contained in the /etc/iscsi/iscsid.conf file might look like this:
node.session.auth.authmethod = CHAP node.session.auth.username = iqn.2005-
03.com.redhat01.78b1b8cad821 node.session.auth.password = password_1
node.session.auth.username_in= iqn.1984- 05.com.dell:powervault.123456
node.session.auth.password_in = test1234567890
discovery.sendtargets.auth.authmethod = CHAP
discovery.sendtargets.auth.username = iqn.2005- 03.com.redhat01.78b1b8cad821
discovery.sendtargets.auth.password = password_1
discovery.sendtargets.auth.username = iqn.1984- 05.com.dell:powervault.
123456 discovery.sendtargets.auth.password_in = test1234567890.
Configure CHAP Authentication On The Host Server Using SUSE Linux
Enterprise Server GUI
1.
Click Start → YaST → iSCSI Initiator.
2.
Click Service Start, then select When Booting.
3.
Select Discovered Targets, then select Discovery.
4.
Enter the IP address of the port.
5.
Click Next.
6.
Select any target that is not logged in and click Log in.
7.
Select one:
48

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Powervault md3820i series

Table of Contents