Example:

In Figure 69, the V-Switch is configured to relay CHAP challenges to the identity, accounting, from the user, steven, to the RADIUS server. The V- Switch is configured to communicate with the RADIUS server through port 1812 to IP address 212.199.43.2. The V-Switch – RADIUS key is DataTurnsMeOn.

The user password is not configured on the V-Switch. The RADIUS server authenticates the user password and sends the results back to the V-Switch.

acl identity add_chap –id accounting –user steven – radius yes

ip radius add –ip 212.199.43.2 –p 1812 –k DataTurnsMeOn

iSCSI

iSCSI

initiator

initiator

iqn.1991-05.microsoft:steven.sanrad

iqn.1991-05.microsoft:wilbur.sanrad

CHAP Authentication:

steven

oneveryhotdude

steven

oneveryhotdude

RADIUS Server

IP SAN

User: steven

PW: oneveryhotdude

Key: DataTurnsMeOn

V-Switch1

 

RADIUS

 

Authentication?

 

allow

cisco.steven

steven

accounting

microsoft:steven

ilovecookies

 

 

Default

 

all

 

NA

 

finance

 

sanrad.billing

 

10262

Figure 69. Logging in to a RADIUS Server

130

SANRAD V-Switch User Manual

Page 136
Image 136
SANRAD V-Switch manual 130, Allow