Setting an isid value, Enabling chap authentication, E “setting an isid value” on – Dell Emulex Family of Adapters User Manual

Page 1616: S, see “enabling chap authentication

Advertising
background image

Boot Version 10.2 for NIC, iSCSI, FCoE, and RoCE Protocols User Manual

P010097-01B Rev. A

10. Configuring and Managing iSCSI Targets with the iSCSISelect Utility

Managing an iSCSI Target

1616

The iSCSI Target Configuration appears with the revised information.

Setting an ISID Value

The ISID qualifier is a unique ISID value to specify if you are connecting dual sessions

to the same target portal group. This value ensures that you do not log into the same

session twice. A combination of the initiator name, ISID qualifier, target name, and

target portal group defines an iSCSI session. For the ISID qualifier, you can enter a

number up to 65535.
To set the ISID Qualifier:
1. Log into the iSCSISelect utility by pressing <Ctrl+S> when prompted.
2. Select Controller Configuration and press <Enter>. A list of controllers is

displayed.

3. Select a controller and press <Enter>. The Controller Configuration menu is

displayed.

4. From the Controller Configuration menu, select iSCSI Target Configuration and

press <Enter>.

5. Select Add New iSCSI Target and press <Enter>.
6. From the Add/Ping iSCSI Target dialog box, select ISID Qualifier and type in a

numeric value.

7. To save your changes, select Save/Login and press <Enter>.

The iSCSI Target Configuration appears with the revised information.

For more information on when an ISID value must be changed, see “Booting from SAN

for iSCSI MPIO” on page 1574.

Enabling CHAP Authentication

The iSCSISelect utility uses CHAP to authenticate initiators and targets for added

network security. By using a challenge/response security mechanism, CHAP

periodically verifies the initiator's identity. This authentication method depends on a

secret known only to the initiator and the target. Although the authentication can be

one-way, you can negotiate CHAP in both directions with the help of the same secret

set for mutual authentication. You must make sure however, that what you configure

on the target side, matches the initiator side. The iSCSISelect utility supports both

one-way and mutual authentication.

Authenticating One-Way CHAP

With one-way CHAP authentication, the target authenticates the initiator. Use one-way

CHAP authentication for a one-way challenge/response security method.
To enable one-way CHAP authentication:
1. Log into the iSCSISelect utility by pressing <Ctrl+S> when prompted.
2. Select Controller Configuration. A list of controllers is displayed.
3. Select a controller and press <Enter>. The Controller Configuration menu is

displayed.

Advertising