•
Single-direction—The target authenticates the identity of the initiator with the user-provided CHAP
secret. To enable single-direction CHAP, you must enable CHAP for a specific initiator record on
the MPX200 and enter a corresponding CHAP secret from the iSCSI host.
•
Bidirectional—The initiator and target authenticate each other's identity by using the user-provided
CHAP secrets. To enable bidirectional CHAP for a discovery session, you must provide a CHAP
secret for the initiator and for the iSCSI port for which you are performing discovery. To enable
bidirectional CHAP for a normal session, you must provide a CHAP secret for the initiator and for
the iSCSI-presented target that you want to log in to.
•
Single-direction CHAP during discovery session and during normal session
•
Single-direction CHAP during discovery session and bidirectional CHAP during normal session
•
Bidirectional CHAP during discovery session and single-direction CHAP during normal session
•
Bidirectional CHAP during discovery session and during normal session
Enabling single-direction CHAP during discovery session and normal session
Table 12
lists the settings you use to enable single-direction CHAP during a discovery session and
normal session.
Table 12 CHAP single-direction settings
Source
iSCSI Port
Discovered iSCSI Initiator
iSCSI Presented Target
1
These are examples of secret settings. Configure CHAP using settings that apply to your network environment.
To enable CHAP for the MPX200-discovered iSCSI initiator entry:
•
If the iSCSI initiator is not listed when you execute the set chap command, do one of the follow-
ing:
• From HP Command View EVA, select Hosts, and then select the Add Host tab. Enter the IQN
string.
• From the CLI, use the add command to add the iSCSI initiator that will perform the discovery.
•
If the iSCSI initiator is listed when you execute the set chap command, then enable the CHAP
secret (for example, CHAPsecret01):
1.
Select the index of the iSCSI initiator.
2.
Enable CHAP by selecting 0 and then entering the CHAP secret.
To enable CHAP for the Microsoft iSCSI initiator:
1.
Click Discovery.
• To discover iSCSI target portals manually:
a.
Click Add under Target Portals.
b.
Enter the IP address of the MPX200 iSCSI port.
c.
Click Advanced.
d.
Select the CHAP Login Information check box.
1
MPX200 secret settings
Setting (example)
N/A
CHAPsecret01
N/A
Microsoft initiator secret settings
Action
General Tab Secret
Add Target Portal
Log on to Target
MPX200 Multifunction Router User Guide
1
Setting (example)
N/A
CHAPsecret01
CHAPsecret01
107