Prerequisite Tasks; Using Iscsi Authentication; Aaa Security Services - HP StorageWorks SR2122 User Manual

Configuring Authentication

Prerequisite Tasks

Before performing AAA and iSCSI authentication configuration tasks on the
storage router, make sure you have configured system parameters as described in
Chapter 5, "Configuring the Storage Router"
Parameters"
configure SCSI routing instances as described in
Routing"
Note:
parameters and are not shared across a cluster. However, you may prefer to configure
all storage routers in a cluster with the same authentication settings.

Using iSCSI Authentication

iSCSI authentication provides a mechanism to authenticate all IP hosts that
request access to storage via a SCSI routing instance. When enabled, iSCSI
drivers provide user name and password information each time an iSCSI TCP
connection is established. iSCSI authentication uses the iSCSI CHAP (Challenge
Handshake Authentication Protocol) authentication method. Authentication
services are provided by the AAA subsystem configured for each storage router.
Authentication, authorization and accounting (AAA) is an architectural
framework for configuring a set of three independent security functions in a
consistent, modular manner. The storage router implements the authentication
function.
Authentication provides a method of identifying users (including login and
password dialog, challenge and response, and messaging support) prior to
receiving access to the requested object, function, or network service. AAA
authentication is configured by defining a list of authentication services. iSCSI
authentication, which uses the AAA authentication services list, can be enabled
for specific SCSI routing instances.

AAA Security Services

iSCSI authentication uses AAA security services to administer its security
functions. If you are using remote security servers, AAA is the means through
which you establish communications between the storage router and the remote
RADIUS or TACACS+ security server.
146
If the storage router is deployed for SCSI routing, you should also
before proceeding.
AAA and iSCSI authentication configuration settings are system-wide
and Chapter 6, "Configuring System
Chapter 8, "Configuring SCSI
IP Storage Router SR2122-2 User Guide