Understanding chap authentication, What is chap, Target chap – Dell PowerVault MD3220i User Manual

Page 63: Mutual chap, Chap see "understanding chap

Advertising
background image

Appendix—Manual Configuration of iSCSI

63

5 Select the host type.
6 Select whether or not the host server will be part of a host server group that

shares access to the same virtual disks as other host servers. Select

Yes only

if the host is part of a Microsoft cluster.

7 Click Next.
8 Specify if this host will be part of a host group.
9 Click Finish.

Understanding CHAP Authentication

What is CHAP?

Challenge Handshake Authentication Protocol (CHAP) is an optional iSCSI

authentication method where the storage array (target) authenticates iSCSI

initiators on the host server. Two types of CHAP are supported

• Target CHAP
• Mutual CHAP

Target CHAP

In target CHAP, the storage array authenticates all requests for access issued

by the iSCSI initiator(s) on the host server using a CHAP secret. To set up

target CHAP authentication, you must enter a CHAP secret on the storage

array, then configure each iSCSI initiator on the host server to send that

secret each time it attempts to access the storage array.

Mutual CHAP

In addition to setting up target CHAP, you can set up mutual CHAP in which

both the storage array and the iSCSI initiator authenticate each other. To set up

mutual CHAP, configure the iSCSI initiator with a CHAP secret that the

storage array must send to the host sever in order to establish a connection. In

this two-way authentication process, both the host server and the storage array

send information that the other must validate before a connection is allowed.

book.book Page 63 Sunday, September 11, 2011 10:24 PM

Advertising
This manual is related to the following products: