Dell Emulex Family of Adapters - Manual (Page 1682)

Boot Version 10.2 for NIC, iSCSI, FCoE, and RoCE Protocols User Manual P010097-01B Rev. A
12. Configuring UEFI for iSCSI
Adding and Configuring Targets
1682
Selecting an Authentication Method
The Emulex iSCSI configuration utility uses CHAP to authenticate initiators and targets
for added network security. By using a challenge/response security mechanism, CHAP
periodically verifies the initiator's identity. This authentication method depends on a
secret known only to the initiator and the target. Although the authentication can be
one-way, you can negotiate CHAP in both directions with the help of the same secret
set for mutual authentication. You must make sure however, that what you configure
on the target side, matches the initiator side. The Emulex iSCSI configuration utility
supports both one-way and mutual authentication.
To configure the CHAP authentication method:
1. On the iSCSI Target Configuration screen, select the target name and press <Enter>.
The Edit/Ping Target screen is displayed.
Figure 12-17 Authentication Method Option on the Edit/Ping Target Screen
2. Select the Authentication Method option and press <Enter>.
3. Select None, One-way CHAP, or Mutual CHAP from the pop-up menu and press
<Enter>.

One-way CHAP – With one-way CHAP authentication, the target authenticates
the initiator. Use one-way CHAP authentication for a one-way
challenge/response security method – you must configure the username and
password (secret), which is authenticated by the target.

Mutual CHAP – With mutual CHAP authentication, the target authenticates the
initiator and the initiator authenticates the target. Use mutual CHAP
authentication for a two-way challenge/response security method – you must
configure different CHAP and mutual CHAP usernames and passwords.