Switch-To-Iscsi Initiator Authentication; Load Balancing Through Connection Redirection; Discovery Domain Set Configuration Example - HP A7533A - Brocade 4Gb SAN Switch Base Administrator's Manual

Figure 23

Discovery domain set configuration example

Switch-to-iSCSI initiator authentication

iSCSI sessions are authenticated using CHAP (Challenge Handshake Authentication Protocol). The iSCSI
gateway service supports the following three strategies for CHAP authentication:
• One-way—Only the iSCSI VT authenticates the session.
• Mutual—Both the iSCSI initiator and the iSCSI VT authenticate the session.
• Binding user names—Specific user names can be bound to an iSCSI VT. Only those user names can be
used for authentication during iSCSI login.
NOTE: iSCSI gateway service does not support IPSec.

Load balancing through connection redirection

Connection redirection allows iSCSI sessions to be evenly distributed across ports on the same blade.
Before the maximum number of connections is reached for any given port, logins are redirected to the next
available port, resulting in an even distribution of sessions. This distribution occurs only during the first
login phase. Existing connections are not redistributed when iSCSI ports change state from disabled to
enabled or offline to online.
Connection redirection does not need to be committed as a configuration parameter. It is independently
enabled and disabled.
DDS et 1
iS C S I virtual targets (V T s )
DD1
iS C S I initiator A
IP network
iS C S I initiator B
DD2
iS C S I gateway s ervic e
V T 1
V T 2
V T 3
Fabric OS 6.1.x administrator guide 257