Configure CHAP Authentication on the Host Server (optional)
Select the set of steps in one of the following sections (Windows or Linux) that corresponds to your
operating system.
Using Windows Server 2003 or Windows Server 2008 GUI version
1) Click Start −>Programs−>Microsoft iSCSI Initiator or Start −>All Programs−>Administrative
Tools−> iSCSI Initiator.
2) If you are using mutual CHAP authentication:
a) Click the General tab
b) Select Secret
c) Enter a secure secret, enter the mutual CHAP secret you entered for the iSCSI to SAS
bridge
3) Click the Discovery tab.
4) Under Target Portals, select the IP address of the iSCSI port on iSCSI bridge and click Remove.
The iSCSI port you configured on the iSCSI to SAS bridge during target discovery should
disappear. You will reset this IP address under CHAP authentication in the steps that
immediately follow.
5) Under Target Portals, click Add and re-enter the IP address or DNS name of the iSCSI port on
the iSCSI bridge (removed above).
6) Click Advanced and set the following values on the General tab:
d) Local Adapter: Should always be set to Microsoft iSCSI Initiator.
e) Source IP: The source IP address of the host you want to connect with.
f) Data Digest and Header Digest: Optionally, you can specify that a digest of data or header
information be compiled during transmission to assist in troubleshooting.
g) CHAP logon information: Enter the target CHAP authentication username and secret you
entered (for the host server) on the iSCSI to SAS bridge.
h) Perform mutual authentication: If mutual CHAP authentication is configured, select this
option.
NOTE:
IPSec is not supported.
7) Click OK.
Using Windows Server 2008 Core Version
1) Set the iSCSI initiator services to start automatically (if not already set): sc \\<server_name>
config msiscsi start= auto
2) Start the iSCSI service (if necessary): sc start msiscsi
3) If you are not using mutual CHAP authentication, skip to step 4.
4) Enter the mutual CHAP secret you entered for the iSCSI to SAS bridge: iscsicli CHAPSecret
<secret>
5) Remove the target portal that you configured on the iSCSI to SAS bridge during target discovery:
iscsicli RemoveTargetPortal <IP_address> <TCP_listening_port>
6) You will reset this IP address under CHAP authentication in the following steps.
Add the target portal with CHAP defined:
iscsicli QAddTargetPortal
<IP_address_of_iSCSI_port_on_storage_array>
[CHAP_username][CHAP_password]
where
[CHAP_username] is the initiator name
[CHAP_password] is the target CHAP secret
Page 7
페이지 인쇄