Dell PowerVault 3000i - Manual (Page 47)

Setting Up Your iSCSI Storage Array
47
Step 5: Configure CHAP Authentication on the Storage Array
(optional)
If you are configuring CHAP authentication of any kind (either target-only or target and mutual), you
must complete this step and Step 6: Configure CHAP Authentication on the Host Server (optional).
If you are not configuring any type of CHAP, skip these steps and go to Step 7: Connect to the Target
Storage Array from the Host Server.
NOTE:
If you choose to configure mutual CHAP authentication, you must first configure target CHAP.
Remember, in terms of iSCSI configuration, the term target always refers to the storage array.
Configuring Target CHAP Authentication on the Storage Array
1 From MD Storage Manager, click the iSCSI tab, then Change Target Authentication.
Make a selection based on the following:
2 To configure a CHAP secret, select CHAP and select CHAP Secret.
3 Enter the Target CHAP secret (or Generate Random Secret), confirm it in Confirm Target CHAP
Secret and click OK.
Although the storage array allows sizes from 12 to 57 characters, many initiators only support CHAP
secret sizes up to 16 characters (128-bit).
NOTE:
Once entered, a CHAP secret is not retrievable. Make sure you record the secret in an accessible
place. If Generate Random Secret is used, copy and past the secret into a text file for future reference since
the same CHAP secret will be used to authenticate any new host servers you may add to the storage array. If
you forget this CHAP secret, you must disconnect all existing hosts attached to the storage array and repeat
the steps in this chapter to re-add them.
4 Click OK.
Table 4-7. CHAP Settings
Selection Description
None This is the default selection. If None is the only selection, the storage array will
allow an iSCSI initiator to log on without supplying any type of CHAP
authentication.
None and
CHAP The storage array will allow an iSCSI initiator to log on with or without CHAP
authentication.
CHAP If CHAP is selected and None is deselected, the storage array will require CHAP
authentication before allowing access.