Chapter 7 Controlling Access To Your Ip San; Limiting Discovery Of Iscsi Targets With Auto-Discovery Control Lists - Adaptec 5325302057 User Manual

Controlling Access to Your IP SAN
This chapter describes how to use Adaptec Storage Manager to restrict and control
access to your IP SAN and iSCSI targets (logical devices) with auto-discovery
control lists, authentication, and the Security Manager.
Limiting Discovery of iSCSI Targets with Auto-discovery
Control Lists
If you want to limit which iSCSI initiators can discover an iSCSI target (logical
device), you can create an auto-discovery control list which will allow one or more
specified iSCSI initiators to discover an iSCSI target while preventing other iSCSI
initiators from discovering it, as illustrated in this figure.
Auto-discovery control list
allows Initiator A to
discover target
iSCSI Initiator A
Each iSCSI target can have its own auto-discovery control list, with specified iSCSI
initiators that are permitted to discover it.
Auto-discovery control lists don't prevent iSCSI initiators from logging into
Note
iSCSI targets that aren't on their control lists. If you are using iSNS to discover iSCSI
targets and want to control which logical devices are logged into by which iSCSI
initiators, you must set CHAP authentication. Without CHAP authentication, all
iSCSI initiators will be able to log in to all iSCSI targets. See "Controlling Access to
Your IP SAN with Authentication" on page 79 for more information.
iSCSI Target
Auto-discovery control
list denies discovery to
iSCSI Initiator B
Initiator B
Snap Server 700i Series User's Guide
Chapter 7
77