Dell 3000i manual Understanding Chap Authentication, What is CHAP?, Target Chap, Mutual Chap

Page 45

Understanding CHAP Authentication

Before proceeding to either Step 5: Configure CHAP Authentication on the Storage Array (optional) or

Step 6: Configure CHAP Authentication on the Host Server (optional), it would be useful to gain an overview of how CHAP authentication works.

What is CHAP?

Challenge Handshake Authentication Protocol (CHAP) is an optional iSCSI authentication method where the storage array (target) authenticates iSCSI initiators on the host server. Two types of CHAP are supported: target CHAP and mutual CHAP.

Target CHAP

In target CHAP, the storage array authenticates all requests for access issued by the iSCSI initiator(s) on the host server via a CHAP secret. To set up target CHAP authentication, you enter a CHAP secret on the storage array, then configure each iSCSI initiator on the host server to send that secret each time it attempts to access the storage array.

Mutual CHAP

In addition to setting up target CHAP, you can set up mutual CHAP in which both the storage array and the iSCSI initiator authenticate each other. To set up mutual CHAP, you configure the iSCSI initiator with a CHAP secret that the storage array must send to the host sever in order to establish a connection. In this two-way authentication process, both the host server and the storage array are sending information that the other must validate before a connection is allowed.

CHAP is an optional feature and is not required to use iSCSI. However, if you do not configure CHAP authentication, any host server connected to the same IP network as the storage array can read from and write to the storage array.

NOTE: If you elect to use CHAP authentication, you should configure it on both the storage array (using MD Storage Manager) and the host server (using the iSCSI initiator) before preparing virtual disks to receive data. If you prepare disks to receive data before you configure CHAP authentication, you will lose visibility to the disks once CHAP is configured.

Setting Up Your iSCSI Storage Array

45

Image 45
Contents Systems Installation Guide February Contents Configuring iSCSI on your Storage Array If you are using Windows Server 2008 Core VersionIf you are using Rhel 5 or Sles 10 SP1 Guidelines for Configuring Your Network for iSCSI Contents System Requirements IntroductionManagement Station Hardware Requirements IntroductionIntroduction to Storage Arrays Hardware Installation Storage Configuration PlanningAbout the Enclosure Connections Direct-Attached Solutions Cabling the EnclosureRedundancy vs. Nonredundancy Private network Controller Hardware Installation Two-node cluster Ethernet Two host serverMD3000i RAID Four host server Port ControllersCorporate, public or private network Enclosure dual Private network Controllers Network-Attached SolutionsIP SAN Gigabit Ethernet Host servers Ethernet switch Attaching MD1000 Expansion Enclosures Expanding with Previously Configured MD1000 Enclosures Expanding with New MD1000 Enclosures Hardware Installation Software Installation System Assembly and StartupSoftware Installation Installing the iSCSI Initiator on a Linux Host Server Installing the iSCSI Initiator on a Windows Host ServerTo install the iSCSI initiator during Rhel 4 installation To install the iSCSI initiator after Rhel 4 installationTo install the iSCSI initiator after Rhel 5 installation To install the iSCSI initiator during Rhel 5 installationTo install the iSCSI initiator after Sles 9 installation To install the iSCSI initiator during Sles 9 installationInstalling MD Storage Software Software Installation Command to manually mount CD is When the installation completes, click Done Installing a Dedicated Management Station Windows and Linux Viewing Resource CD Contents Installing the ManualsDocumentation for Windows Systems Insert the CD Documentation for Linux SystemsInstalling the Manuals Array Setup and iSCSI Configuration Before You StartTerminology Management station ISCSI Configuration WorksheetStorage array TargetStatic IP address storage array SubnetDefault gateway Setting Up Your iSCSI Storage ArrayISCSI controller 0, ISCSI controller 1,Target Chap MD3000iUsing iSNS Configuring iSCSI on Your Storage ArrayArray Discover the Storage Array Out-of-band management only Default Management Port SettingsAutomatic Storage Array Discovery Manual Storage Array DiscoverySet Up the Array Update your management station Initial Setup Tasks→ ConfigureAddresses on each controller Ethernet Management Ports, thenConfigure the iSCSI Ports on the Storage Array If you are using Windows Server 2008 Core Version Start the iSCSI service sc start msiscsiPerform Target Discovery from the iSCSI Initiator If you are using Linux Server Etc/init.d/iscsi restart If you are using Rhel 5 or Sles 10 SP1Iscsiadm -m node -T initiatorusername -p targetip -u Configure Host Access What is CHAP? Understanding Chap AuthenticationTarget Chap Mutual ChapHow Chap Is Set Up Chap DefinitionsChap Types Defined Description Configure Chap Authentication on the Storage Array optional Configuring Target Chap Authentication on the Storage ArrayChap Settings Selection Description None Configuring Mutual Chap Authentication on the Storage Array Configure Chap Authentication on the Host Server optional IPaddressofiSCSIportonstoragearray CHAPusername CHAPpassword Setting Up Your iSCSI Storage Array If you are using Rhel 5 or Sles 10 SP1 If you are using SLES10 SP1 via the GUI Connect to the Target Storage Array from the Host Server TCPPortNumberOfTargetPortal is Iscsicli SessionList If you are using a Linux ServerViewing the status of your iSCSI connections Optional Set Up In-Band Management Troubleshooting Tools Premium FeaturesSetting Up Your iSCSI Storage Array Uninstalling Software Uninstalling From WindowsUninstalling Software Uninstalldellmdstoragemanager and press Enter Uninstalling From LinuxGuidelines for Configuring Your Network for iSCSI Windows Host SetupNetwork Configuration Guidelines Linux Host Setup NETWORKING=yes HOSTNAME=mymachine.mycompany.com Configuring TCP/IP on Linux using Dhcp root users onlyNetwork Configuration Guidelines Index Linux, 64 static IP, 63 WinsIndex RAID

3000i specifications

The Dell 3000i is a powerful and versatile storage solution designed to meet the needs of modern businesses. Known for its flexibility and efficiency, this entry-level storage array offers a range of features that cater to small to medium enterprises and branch offices, providing them with reliable, scalable, and high-performance data management capabilities.

One of the standout features of the Dell 3000i is its impressive performance. It is powered by Dell's proprietary technology, enabling it to handle various workloads with ease. With support for both block and file storage, the 3000i allows organizations to streamline their data operations and optimize their storage strategies. This flexibility means that regardless of the specific requirements, users can manage their data efficiently and effectively.

The Dell 3000i supports multiple connectivity options, including iSCSI and Fibre Channel, ensuring that it can be integrated seamlessly into existing IT environments. This versatility allows organizations to leverage their current infrastructure while capitalizing on the advanced capabilities of the 3000i. Additionally, it features a modular architecture, enabling users to scale their storage incrementally as their needs grow. This means businesses can start with a small footprint and expand their storage capacity without any disruption.

Data protection is a critical concern for all organizations, and the Dell 3000i addresses this with advanced RAID configurations, which safeguard data against hardware failures. Furthermore, it includes features such as snapshots and remote replication, allowing businesses to implement robust disaster recovery solutions. These capabilities ensure that data remains safe and accessible, even in the event of unexpected incidents.

Another notable characteristic of the Dell 3000i is its management interface. The system is equipped with an intuitive and user-friendly management console that simplifies administrative tasks. This console provides real-time insights into performance metrics, storage utilization, and system health, enabling IT administrators to make informed decisions quickly.

In conclusion, the Dell 3000i stands out as a reliable and efficient storage solution for organizations seeking to enhance their operational capabilities. With its high performance, flexibility, and robust data protection features, it effectively supports the growing data demands of today’s digital landscape. Businesses looking for a storage system that can evolve with their needs will find the Dell 3000i to be a compelling choice, combining advanced technology with user-friendly management for optimal data handling.