Configuring Authentication - Cisco MDS 9000 Series Troubleshooting Manual

Troubleshooting iSCSI Issues
S e n d c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
Figure 5-12
Figure 5-12 Failed iSCSI Login Status Window
On Solaris systems, a failed login is found in the /var/adm/messages directory and should look similar
to the following example.
Mar 14 11:44:42 ca-sun1 iscsid[12561]: [ID 702911 daemon.notice] login rejected: initiator
error (01)
Mar 14 11:44:42 ca-sun1 iscsid[12561]: [ID 702911 daemon.error] Hard discovery login
failure to 172.22.91.223:3260 - exiting
Mar 14 11:44:42 ca-sun1 iscsid[12561]: [ID 702911 daemon.notice] discovery process for
172.22.91.223 finished, exiting

Configuring Authentication

Whenever you experience a login failure, use the show authentication command to see if the iSCSI
authentication is correctly defined. A sample of local authentication should look like this:
switch# show authentication
authentication method:none
authentication method:radius
authentication method:local
switch#
If iSCSI is configured for radius authentication, it should looks like this:
switch# show authentication
authentication method:none
authentication method:radius
Cisco MDS 9000 Family Troubleshooting Guide
5-32
shows a failed iSCSI login for the Windows 2000 driver.
console:not enabled
telnet/ssh:not enabled
console:not enabled
telnet/ssh:not enabled
iscsi:not enabled
<<<<<<<<<<<<<<<<<<<<
console:enabled
telnet/ssh:enabled
iscsi:enabled <<<<<<<<<<<<<<<<<<<<
console:not enabled
telnet/ssh:not enabled
<<<<<<<<<<<<<<<<<<<
console:not enabled
Chapter 5 Troubleshooting IP Storage Issues
OL-5183-02, Cisco MDS SAN-OS Release 1.3