Setting user authentication (iscsi environments), Enabling and disabling authentication, Of hosts on iscsi targets – HP StorageWorks XP10000 Disk Array User Manual

Page 124

Advertising
background image

6.

Click OK. Settings are applied to the array.

To return the Fibre Channel setting, perform the same operation, except select Authentication

bi-directional->unidirectional in step 4.

Specifying whether a Fibre Channel switch can perform authentication

To enable Fibre Channel switches to authenticate hosts, you must enable the Fibre Channel switch's user

authentication settings. By default, Fibre Channel switch authentication is disabled.
To enable a Fibre Channel switch to authenticate hosts:

1.

Start LUN Manager, and display the Authentication pane (

Figure 30

).

2.

In the Port tree, double-click the Subsystem folder. If the array contains Fibre Channel adapters, the

Fibre folder appears below the Subsystem folder.

3.

In the Port tree, double-click the Fibre folder. Information about the Fibre Channel switch appears in

the FC Switch Information list.

4.

Right-click any point in the FC Switch Information list, and select Authentication Disable->Enable.

5.

Click Apply. A confirmation message appears.

6.

Click OK. Settings are applied to the array.

To return the Fibre Channel switch setting so the switch cannot authenticate hosts, perform the same

operation, except select Authentication Enable->Disable in step 4.

Setting user authentication (iSCSI environments)

When configuring iSCSI environments, use the Authentication pane (

Figure 30

) to set user authentication

on iSCSI targets of the array. First, specify whether or not each iSCSI target performs authentication of

hosts, and then register the hosts' user information on the iSCSI targets that perform authentication.

According to this setting, iSCSI targets can authenticate hosts that request a connection and restrict the

connections. In addition, to implement mutual authentication, specify the iSCSI targets' user information

on each iSCSI target of the array.
This section describes the iSCSI target setting operations for user authentication.
For an overview of user authentication, see

User authentication (iSCSI environments)

.

NOTE:

The hosts to be connected must also be configured for authentication by iSCSI targets (and for

authentication of iSCSI targets by the host, if required). For more information about configuring the host

for CHAP authentication, see the documentation for the operating system and iSCSI driver in your

environment.

Enabling and disabling authentication of hosts on iSCSI targets

You can specify whether to perform authentication of hosts on each iSCSI target. Switch the user

authentication settings of iSCSI targets to enable or disable authentication of hosts. By default, user

authentication is disabled.
To enable authentication of hosts on an iSCSI target:

1.

Start LUN Manager, and display the Authentication pane (

Figure 30

).

2.

In the Port tree, double-click the Subsystem folder. If the array contains iSCSI channel adapters, the

iSCSI folder appears below the Subsystem folder.

3.

Under the iSCSI folder, double-click the iSCSI folder or iSCSI port icon.
If you double-click the iSCSI folder, iSCSI ports in the array appear as icons.

124

LUN Manager operations

Advertising