Authentication Mechanism; Local Authentication - Cisco DS-X9530-SF1-K9 - Supervisor-1 Module - Control Processor Configuration Manual

Chapter 35 Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m .
To configure AAA authentication for an iSCSI user, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# aaa authentication
iscsi default group RadServerGrp
switch(config)# aaa authentication
iscsi default group TacServerGrp
switch(config)# aaa authentication
iscsi default local

Authentication Mechanism

You can configure iSCSI CHAP or None authentication at both the global level and at each interface
level.
The authentication for a Gigabit Ethernet interface or subinterface overrides the authentication method
configured at the global level.
If CHAP authentication should always be used, issue the iscsi authentication chap command at either
the global level or at a per-interface level. If authentication should not be used at all, issue the iscsi
authentication none command.
To configure the authentication mechanism for iSCSI, follow these steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# iscsi authentication
chap
To configure the authentication mechanism for iSCSI sessions to a particular interface, follow these
steps:
Command
Step 1
switch# config t
switch(config)#
Step 2
switch(config)# interface
GigabitEthernet 2/1.100
switch(config-if)#
Step 3
switch(config-if)# iscsi
authentication none

Local Authentication

See the
create new users in the local password database for the iSCSI initiator, the iSCSI keyword is mandatory.
OL-6973-03, Cisco MDS SAN-OS Release 2.x
"Configuring User Accounts" section on page 26-10
Purpose
Enters configuration mode.
Uses RADIUS servers that are added in the group called
RadServerGrp for the iSCSI CHAP authentication.
Uses TACACS+ servers that are added in the group called
TacServerGrp for the iSCSI CHAP authentication.
Uses the local password database for iSCSI CHAP
authentication.
Purpose
Enters configuration mode.
Configures CHAP as the default authentication
mechanism globally for the Cisco MDS switch. CHAP
authentication is required for all iSCSI sessions.
Purpose
Enters configuration mode.
Selects the Gigabit Ethernet interface.
Specifies that no authentication is required for iSCSI
sessions to the selected interface.
to create the local password database. To
Cisco MDS 9000 Family Configuration Guide
Configuring iSCSI
35-23