Configuring An Iscsi Radius Server; Advanced Iscsi Configuration - Cisco DS-C9216I-K9 Configuration Manual

Configuring iSCSI
Choose End Devices > iSCSI from the Fabric Manager Physical Attributes pane, or choose IP > iSCSI
Step 1
from Device Manager. You see the iSCSI tables in the Fabric Manager Information pane, or the Device
Manager iSCSI dialog box.
Click the Global tab. You see the iSCSI authentication configuration table.
Step 2
From Fabric Manager, choose chap or none from the authMethod column.
Step 3
From Device manager, check the Chap check box to configure DH-CHAP authentication, or check the
none check box for no authentication.
Click the Apply Changes icon in Fabric Manager (or click Apply in Device Manager) to save these
Step 4
changes, or click Undo Changes in Fabric Manager (or click Cancel in Device Manager) to discard
changes.

Configuring an iSCSI RADIUS Server

To configure an iSCSI RADIUS server, follow these steps:
Configure the RADIUS server to allow access from the Cisco MDS switch's management Ethernet IP
Step 1
address.
Configure the shared secret for the RADIUS server to authenticate the Cisco MDS switch.
Step 2
Configure the iSCSI users and passwords on the RADIUS server.
Step 3

Advanced iSCSI Configuration

Advanced configuration options are available for iSCSI interfaces on a per-IPS port basis. These
configurations are similar to the advanced FCIP configurations and are already explained in that section.
Cisco MDS switches support the following advanced features for iSCSI interfaces:
•
•
•
•
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
24-38
iSCSI listener port—Configure the TCP port number for the iSCSI interface which listens for new
TCP connections. The default port number is 3260. Following that, the iSCSI port only accepts TCP
connections on the newly configured port
TCP tuning parameters—The following TCP parameters can be configured.
SACK is enabled by default for iSCSI TCP configurations.
–
QoS configurations differ for iSCSI and FCIP interfaces.
–
Identification of dynamic iSCSI initiator—iSCSI initiators are identified based on their IQN name
or their IP address. In the absence of any configuration for the initiator (WWN or VSAN
membership), the identifier key is the default connection. By default, the key is the IQN name but
can be changed to IP address by toggling this mode.
Proxy or transparent Initiator—For each iSCSI initiator with iSCSI target sessions, the switch
creates a virtual FC initiator with a distinct pair of WWNs per VSAN. Targets that have access
control per LUN, the WWN pair of each FC initiator must be configured in the target. The proxy
initiator mode can be enabled to facilitate this configuration, in which case, all iSCSI initiators
which connect to this iSCSI interface inherit the same WWN pair and create only one virtual FC
initiator in each VSAN.
Chapter 24 Configuring IP Storage
OL-7753-01