Server Settings When Chap Authentication Is Used - Fujitsu ETERNUS DX Configuration Manual

Chapter 6 Installing the iSCSI Software Initiator and Setting Up the Server
6.2 Setting Up the Server
6.2.4

Server Settings when CHAP Authentication is Used

To use CHAP authentication, the following items must be set for the iSCSI ports of the ETERNUS DX and for
the iSCSI Initiators.
When setting the iSCSI port parameters for the ETERNUS DX, specify the "-I" option and input the IP address.
When setting the iSCSI Initiator parameters, do not specify the "-I" option.
CHAP Method
•
Initiator CHAP Name
•
CHAP Secret
•
1
Set the CHAP Method.
The CHAP authentication method (unidirectional or bidirectional) must be set.
Set the CHAP Method value indicated in the following table:
CHAP authentication method
Unidirectional CHAP authentication
Bidirectional CHAP authentication
Use the "iscsiutil" command to set the CHAP Method.
# iscsiutil [iscsi-device-file] -u
Example:
To set unidirectional CHAP authentication for the ETERNUS DX whose iSCSI port IP address is
192.1.1.120
# iscsiutil -u -H CHAP_UNI -I 192.1.1.120
2
Set the Initiator CHAP Name.
An Initiator CHAP Name must be set for each target set in
17). The Initiator CHAP Name set here must match the Initiator CHAP Name that is to be set for Target.
Use the "iscsiutil" command to set the CHAP Method.
# iscsiutil [iscsi-device-file] -u -N <chap-initiator-name>
Example:
To set "mychapname" as the CHAP name for a specific target (192.1.1.120):
# iscsiutil -u -N mychapname -I 192.1.1.120
FUJITSU Storage ETERNUS DX Configuration Guide -Server Connection- (iSCSI) for HP-UX
-H <chap-authentication-type>
[-T <target-name> [-I <ip-address>] [-P <tcp-port>]
[-T <target-name> [-I <ip-address>] [-P <tcp-port>]
[-M <portal-grp-tag>]]
19
Copyright 2014 FUJITSU LIMITED
CHAP Method setting
CHAP_UNI
CHAP_BI
Step 4 of "6.2.3 iSCSI Basic Settings" (page
P3AM-3402-14ENZ0