Step 4: configure host access, Understanding chap authentication, What is chap – Dell PowerVault MD3660i User Manual
Page 37: Target chap, Mutual chap
6.
Verify that the iSCSI service is running during boot using the following command from the console:
chkconfig iscsi on
7.
To display the available iSCSI targets at the specified IP address, use the following command:
iscsiadm –m discovery –t st -p <IP_address_of_iSCSI_port>
8.
After target discovery, use the following command to manually log in:
iscsiadm -m node –l
This log in is performed automatically at startup if automatic startup is enabled.
9.
Manually log out of the session using the following command:
iscsiadm -m node -T <initiator_username> -p <target_ip> -u
Step 4: Configure Host Access
This step specifies which host servers access virtual disks on the storage array. You should perform this step:
•
Before mapping virtual disks to host servers
•
Any time you connect new host servers to the storage array
1.
Launch MD Storage Manager.
2.
Navigate to the AMW and click Manually define hosts.
3.
At Enter host name, enter the host server for virtual disk mapping.
This can be an informal name, not necessarily a name used to identify the host server to the network.
4.
Select a method for adding the host port identifier
5.
Select the host type.
6.
Select whether or not the host server will be part of a host server group that shares access to the same virtual
disks as other host servers. Select Yes only if the host is part of a Microsoft cluster.
7.
Click Next.
8.
Specify if this host will be part of a host group.
9.
Click Finish.
Understanding CHAP Authentication
What Is CHAP
Challenge Handshake Authentication Protocol (CHAP) is an optional iSCSI authentication method where the storage
array (target) authenticates iSCSI initiators on the host server. Two types of CHAP are supported:
•
Target CHAP
•
Mutual CHAP
Target CHAP
In target CHAP, the storage array authenticates all requests for access issued by the iSCSI initiator(s) on the host server
using a CHAP secret. To set up target CHAP authentication, you must enter a CHAP secret on the storage array, then
configure each iSCSI initiator on the host server to send that secret each time it attempts to access the storage array.
Mutual CHAP
In addition to setting up target CHAP, you can set up mutual CHAP in which both the storage array and the iSCSI initiator
authenticate each other. To set up mutual CHAP, configure the iSCSI initiator with a CHAP secret that the storage array
37