Target Access Control List (Acl) Configuration - Chelsio Communications Terminator Series Installation And User Manual

Chapter X. iSCSI PDU Offload Target
Auth_CHAP_Policy=Oneway
i.
a) CHAP Oneway or
b) CHAP Mutual
ii. Auth_CHAP_Policy=Mutual
a) CHAP Mutual
Discovery Session CHAP
CHAP authentication is also supported for the discovery sessions where an initiator queries all of
the available targets.
Discovery session CHAP is configured through the global section in the configuration file. List of
keys to provision discovery CHAP are:
•
DISC_AuthMethod: None or CHAP.
•
DISC_Auth_CHAP_Policy: Oneway or Mutual (i.e., two-way) authentication.
•
DISC_Auth_CHAP_Target: target CHAP user id and secret
•
DISC_Auth_CHAP_Initiator: initiator CHAP user id and secret.
Sample:
#
# Chelsio iSCSI Global Settings
#
global:
DISC_AuthMethod=CHAP
DISC_Auth_CHAP_Policy=Mutual
DISC_Auth_CHAP_Target="target_id1":"target_secret1"
DISC_Auth_CHAP_Initiator="initiator_id1":"initiator_sec1"
4.6.

Target Access Control List (ACL) Configuration

The Chelsio iSCSI target supports iSCSI initiator authorization via an Access Control List (ACL).
ACL configuration is supported on a per-target basis. The creation of an ACL for a target
establishes:
Which iSCSI initiators are allowed to access it
The type of the access: read-write or read-only
Possible SCSI layer associations of LUNs with the initiator
More than one initiator can be allowed to access a target and each initiator‟s access rights can
be independently configured.
Chelsio Unified Wire for Linux
, the iSCSI target will accept a relevant initiator only if it does
, the iSCSI node will accept a relevant initiator only if it does
172