Iscsi-Based Access Control - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 43 Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To add an iSCSI initiator to the zone database, follow these steps:
Command
Step 1
switch# config terminal
switch(config)#
Step 2
switch(config)# zone name iSCSIzone vsan 1
switch(config-zone)
Step 3
switch(config-zone)# member symbolic-nodename
iqn.1987-02.com.cisco.initiator1
switch(config-zone)# no member
symbolic-nodename iqn.1987-02.com.cisco.init1
switch(config-zone)# member ip-address
10.50.1.1
switch(config-zone)# no member ip-address
10.50.1.1
switch(config-zone)# member ipv6-address
2001:0DB8:800:200C::417A
switch(config-zone)# no member ipv6-address
2001:0DB8:800:200C::417A
switch(config-zone)# member pwwn
20:00:00:05:30:00:59:11
switch(config-zone)# no member pwwn
20:00:00:05:30:00:59:11

iSCSI-Based Access Control

iSCSI-based access control is applicable only if static iSCSI virtual targets are created (see the
Mapping" section on page
that are allowed to access the targets.
By default, static iSCSI virtual targets are not accessible to any iSCSI host. You must explicitly configure
accessibility to allow an iSCSI virtual target to be accessed by all hosts. The initiator access list can
contain one or more initiators. The iSCSI initiator can be identified by one of the following mechanisms:
•
•
•
For a transparent mode iSCSI initiator, if both Fibre Channel zoning and iSCSI ACLs are used, then for
Note
every static iSCSI target that is accessible to the iSCSI host, the initiator's virtual N port should be in
the same Fibre Channel zone as the Fibre Channel target.
To configure access control in iSCSI, follow these steps:
Command
Step 1
switch# config terminal
switch(config)#
Step 2
switch(config)# iscsi virtual-target name
iqn.1987-02.com.cisco.initiator
switch(config-iscsi-tgt)#
OL-18084-01, Cisco MDS NX-OS Release 4.x
43-7). For a static iSCSI target, you can configure a list of iSCSI initiators
iSCSI node name
IPv4 address and subnet
IPv6 address
Purpose
Enters configuration mode.
Creates a zone name for the iSCSI devices in the
IPS module or MPS-14/2 module to be included.
Assigns an iSCSI node name-based membership
into a zone.
Deletes the specified device from a zone.
Assigns an iSCSI IPv4 address-based
membership into a zone.
Deletes the specified device from a zone.
Assigns an iSCSI IPv6 address-based
membership into a zone.
Deletes the specified device from a zone.
Assigns an iSCSI port WWN-based membership
into a zone.
Deletes the device identified by the port WWN
from a zone.
Purpose
Enters configuration mode.
Creates the iSCSI target name
iqn.1987-02.com.cisco.initiator.
Cisco MDS 9000 Family CLI Configuration Guide
Configuring iSCSI
"Static
43-21