66 Appendix—Manual Configuration of iSCSI
Configuring Mutual CHAP Authentication on the Storage Array
The initiator secret must be unique for each host server that connects to the
storage array and must not be the same as the target CHAP secret.
Change the initiator authentication settings in the Change Target
Authentication window. Use these options to change the settings:
•
None
—Select
None
if you permit no initiator authentication. If you select
None
, any initiator can access this target. Use this option only if you do
not require secure data. However, you can select both
None
and
CHAP
at
the same time.
•
CHAP
—Select
CHAP
if you want to enable an initiator that tries to
access the target to authenticate using CHAP. Define the CHAP secret
only if you want to use mutual CHAP authentication. If you select
CHAP
,
and if no CHAP target secret is defined, an error message is displayed.
Click
CHAP Secret
to view the
Enter CHAP Secre
t windows. Use this
window to define the CHAP secrets.
NOTE: To remove a CHAP secret, you must delete the host initiator and re-add it.
Step 6: Configure CHAP Authentication on the Host Server (Optional)If you configured CHAP authentication in "Step 5: Configure CHAP
Authentication on the Storage Array (Optional)" on page64, complete the
following steps. If not, skip to "Step 7: Connect to the Target Storage Array
From the Host Server" on page 70.
Select the set of steps in one of the following sections (Windows or Linux)
that corresponds to your operating system.
If you are using Windows Server 2008 GUI version:
1
Click
Start
Programs
Microsoft iSCSI Initiator
or click
Start
All
Programs
Administrative Tools
iSCSI Initiator
.
2
If you are not using mutual CHAP authentication, go to the step 4.
3
If you are using mutual CHAP authentication, click the
General
tab and
select
Secret
. At
Enter a secure secret
, enter the mutual CHAP secret you
entered for the storage array
4
Click the
Discovery
tab.
book.book Page 66 Sunday, September 11, 2011 10:24 PM