Status of connections between hosts and the array, User authentication (fibre channel environments), User authentication operations and settings – HP StorageWorks XP10000 Disk Array User Manual

Page 45

Advertising
background image

Whether to register iSCSI ports in iSNS servers: The iSNS server is a server computer on which

an iSNS service is installed. iSNS is an acronym for Internet Storage Name Service. This server

manages IP addresses and iSCSI names of iSCSI ports. Using iSNS servers is optional. If you

configure and use iSNS servers, iSCSI ports are easily discovered and managed.

NOTE:

For more information about configuring iSNS servers, see the iSNS-related documentation.

iSNS server's IP address: To use an iSNS server, you must specify the iSNS server's IP address.

iSNS server's TCP port number: To use an iSNS server, you must specify the iSNS server's TCP

port number.

NOTE:

Specify 3205 as the TCP port number if you use

Microsoft® iSNS Server

as the iSNS server. If you

specify other than 3205, you cannot register iSCSI ports in the iSNS server.

Status of connections between hosts and the array

Use LUN Manager to issue a ping command from an array iSCSI port to a host. The ping command

checks whether the host and array can communicate with each other. If the host responds to the ping

command, the host and array can communicate with each other. For more information, see

Checking the

status of the connection between hosts and the array (iSCSI environments only)

.

User authentication (Fibre Channel environments)

When configuring Fibre Channel environments, you can use LUN Manager to set user authentication

between the array's ports and hosts. In Fibre Channel environments, ports and hosts use Null

DH-CHAP (Challenge Handshake Authentication Protocol with a Null Diffie-Hellmann algorithm) as the

authentication method. This section provides an overview of user authentication.

NOTE:

Throughout this user guide, Null DH-CHAP is sometimes referred to as CHAP.

User authentication operations and settings

User authentication operations in Fibre Channel environments contain the following phases:

1.

A host group of the array authenticates a host attempting to connect (authentication of hosts).

2.

The host authenticates the connection-target host group of the array (authentication of host groups).

CAUTION:

Because host bus adapters currently do not support this function, this authentication phase

is not used in Fibre Channel environments.

3.

A target port of the array authenticates a Fibre Channel switch attempting to connect (authentication

of Fibre Channel switches).

The array performs user authentication by host groups. Therefore, host groups and hosts must have their

own user information for performing user authentication.
When a host attempts to connect to the array, the authentication of hosts phase starts. In this phase,

it is determined whether the host group requires authentication of the host. If the host group does not

require authentication of the host, the host connects to the array without authentication. If the host group

HP StorageWorks LUN Configuration and Security Manager XP user guide for the

XP12000/XP10000/SVS200

45

Advertising