No Authentication; Chap With Local Password Database; Chap With External Radius Server - HP Cisco MDS 9020 - Fabric Switch Configuration Manual

Chapter 42 Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

No Authentication

Set the iSCSI authentication method to none to configure a network with no authentication.
switch(config)# iscsi authentication none

CHAP with Local Password Database

To configure authentication using the CHAP option with the local password database, follow these steps:
Step 1 Set the AAA authentication to use the local password database for the iSCSI protocol.
switch(config)# aaa authentication iscsi default local
Step 2 Set the iSCSI authentication method to require CHAP for all iSCSI clients.
switch(config)# iscsi authentication chap
Step 3 Configure the user names and passwords for iSCSI users.
switch(config)# username iscsi-user password abcd iscsi
Note
Verify the global iSCSI authentication setup.
Step 4
switch# show iscsi global
iSCSI Global information Authentication: CHAP <----Verify
Import FC Target: Disabled
...

CHAP with External RADIUS Server

To configure authentication using the CHAP option with an external RADIUS server, follow these steps:
Configure the password for the Cisco MDS switch as RADIUS client to the RADIUS server:
Step 1
switch(config)# radius-server key mds-1
Configure the RADIUS server IP address by performing one of the following:
Step 2
Configure an IPv4 address.
switch(config)# radius-server host 10.1.1.10
Configure an IPv6 address.
switch(config)# radius-server host 2001:0DB8:800:200C::417A
Configure the RADIUS server group IP address by performing one of the following:
Step 3
Configure an IPv4 address.
switch(config)# aaa group server radius iscsi-radius-group
OL-16184-01, Cisco MDS SAN-OS Release 3.x
If you do not specify the iscsi option, the user name is assumed to be a Cisco MDS switch user
instead of an iSCSI user.
iSCSI Authentication Setup Guidelines and Scenarios
Cisco MDS 9000 Family CLI Configuration Guide
42-67