Chap single direction settings – HP 3000 Enterprise Virtual Array User Manual

Page 209

Advertising
background image

Single-direction—The target authenticates the identity of the initiator with the user-provided CHAP
secret. To enable single-direction CHAP, you need to enable CHAP for a specific initiator record
on the mpx100/100b and input a corresponding CHAP secret from the iSCSI host.

Bidirectional—The initiator and target authenticate identity of each other with the user-provided
CHAP secrets. To enable bidirectional CHAP for a discovery session, you need to provide a CHAP
secret for the initiator and for the iSCSI port for which you are performing discovery. To enable
bidirectional CHAP for a normal session, you will need to provide a CHAP secret for the initiator
and for the iSCSI-presented target that you are trying to log in to.

Once CHAP is enabled, it is enforced for both the normal and discovery sessions. You only have the
choice of what type (single or bidirectional) of CHAP to perform:

Single–direction CHAP during discovery and during normal session.

Single–direction CHAP during discovery and bidirectional CHAP during normal session.

bidirectional CHAP during discovery and single–direction CHAP during normal session.

bidirectional CHAP during discovery and during normal session.

Enabling single–direction CHAP during discovery and normal
session

Table 34

lists the parameters you use to enable single–direction CHAP.

Table 34 CHAP single direction settings

MS Initiator secret settings

mpx100/100b secret settings

Setting (example)

Action

Setting (example)

Source

N/A

General Tab Secret

N/A

iSCSI Port

CHAPsecret01

Add Target Portal

CHAPsecret01

Discovered iSCSI Initiator

CHAPsecret01

Log on to Target

N/A

iSCSI Presented Target

NOTE:

These are examples of secret settings. Configure CHAP with settings that apply to your specific network
environment.

1.

Enable CHAP for the mpx100/100b discovered iSCSI Initiator entry. Select one of the following
procedures depending upon the interface you are using:

a.

To enable CHAP for the mpx100/100b discovered iSCSI Initiator entry using HP Storage-
Works mpx Manager:
• If the iSCSI Initiator is not listed under Discovered iSCSI Initiators:

i.

Go to the Wizard menu and select the Add Initiator Wizard and enter the iqn name
string.

ii.

Select the Enable CHAP check box.

iii.

Enter a CHAP secret. For example:

CHAPsecret01

• If the iSCSI Initiator is already listed under Discovered iSCSI Initiators:

i.

Select the initiator in the left-hand column of the Discovered ISCSI Initiator list.

ii.

Click the Information tab.

EVA iSCSI Connectivity User Guide

209

Advertising
This manual is related to the following products: