Configuring Authentication Mechanism; Configuring Local Authentication - Cisco MDS 9000 series Configuration Manual

Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
•

Configuring Authentication Mechanism

You can configure iSCSI CHAP or None authentication at both the global level and at each interface
level.
The authentication for a Gigabit Ethernet interface or subinterface overrides the authentication method
configured at the global level.
If CHAP authentication is used, issue the iscsi authentication chap command at either the global level
or at a per-interface level. If authentication should not be used at all, issue the iscsi authentication none
command.
To configure the authentication mechanism for iSCSI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# iscsi authentication
chap
To configure the authentication mechanism for iSCSI sessions to a particular interface, follow these
steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# interface
GigabitEthernet 2/1.100
switch(config-if)#
Step 3
switch(config-if)# iscsi
authentication none

Configuring Local Authentication

See the Cisco MDS 9000 Family NX-OS Security Guide to create the local password database. To create
users in the local password database for the iSCSI initiator, the iSCSI keyword is mandatory.
To configure iSCSI users for local authentication, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# username iscsiuser
password ffsffsfsffs345353554535
iscsi
Cisco MDS 9000 Family NX-OS IP Services Configuration Guide
4-24
Configuring Mutual CHAP Authentication, page 4-25
Purpose
Enters configuration mode.
Configures CHAP as the default authentication
mechanism globally for the Cisco MDS switch. CHAP
authentication is required for all iSCSI sessions.
Purpose
Enters configuration mode.
Selects the Gigabit Ethernet interface.
Specifies that no authentication is required for iSCSI
sessions to the selected interface.
Purpose
Enters configuration mode.
Configures a user name (iscsiuser) and password
(ffsffsfsffs345353554535) in the local database for iSCSI
login authentication.
OL-19525-01,Cisco MDS NX-OS Release 4.2(1)
Chapter 4 Configuring iSCSI