4.
To verify that CHAP is enabled for the iSCSI VT, enter the iscsiCfg
-t and -v options:
switch:admin> iscsicfg --show tgt -t
iqn.2006-10.com.brocade:example-disk001 -v
Number of records found: 1
Name: iqn.2006-10.com.brocade:example-disk001
State/Status: Online/Defined
Auth. Method: CHAP
Binding user names to an iSCSI VT
For additional security, you can bind specific user names to an iSCSI VT. When you do this, the specific
user name and CHAP secret combination is required for authentication during the iSCSI login phase. The
maximum number of user names that can be bound per iSCSI VT is 16.
1.
Connect and log in to the switch.
2.
Enter the isciCfg - -addusername tgt command with the -t and -u options to bind a user
name:
switch:admin> iscsicfg --addusername tgt -t iqn.2002-10.com.brocade:tgt
-u "isisctgt1;hello123"
This operation completed successfully
3.
Enter the iscsiCfg
4.
Enter the iscsiCfg
has been bound to the iSCSI VT:
switch:admin> iscsicfg --show tgt -t iqn.2002-10.com.brocade:tgt -v
Number of records found: 1
Name: iqn.2002-10.com.brocade:tgt1
CHAP Users
1. iscsitgt1
2. hello123
Deleting user names from an iSCSI VT binding list
User names can be deleted from the list of bound user names.
1.
Connect and log in to the switch.
2.
Enter the isciCfg --deleteusername tgt command with the -t and -u options to delete a user
name:
switch:admin> iscsicfg --deleteusername tgt -t
iqn.2002-10.com.brocade:tgt -u isisctgt1
This operation completed successfully
Displaying CHAP configurations
You can display a list of the user names that have been set up on the fabric for iSCSI initiator
authentication.
1.
Connect and log in to the switch.
2.
Enter the iscsiCfg
switch:admin> iscsicfg --show auth
Number of records found: 1
Name Status
username0001Defined
commit all command.
--
show tgt command with the -t and -v options to verify that a user name
--
CHAP Status
Online/Committed
Invalid
show auth command:
--
show tgt command with the
--
Fabric OS 6.2 administrator guide 321