Dell PowerVault MD3200i Deployment Guide - Page 64

Configuring Mutual CHAP Authentication on the Storage Array

Page 64 highlights

Configuring Mutual CHAP Authentication on the Storage Array The initiator secret must be unique for each host server that connects to the storage array and must not be the same as the target CHAP secret. Change the initiator authentication settings in the Change Target Authentication window. Use these options to change the settings: • None-Select None if you permit no initiator authentication. If you select None, any initiator can access this target. Use this option only if you do not require secure data. However, you can select both None and CHAP at the same time. • CHAP-Select CHAP if you want to enable an initiator that tries to access the target to authenticate using CHAP. Define the CHAP secret only if you want to use mutual CHAP authentication. If you select CHAP, and if no CHAP target secret is defined, an error message appears. Click CHAP Secret to view the Enter CHAP Secret windows. Use this window to define the CHAP secrets. NOTE: To remove a CHAP secret, you must delete the host initiator and re-add it. Step 6: Configure CHAP Authentication on the Host Server (Optional) If you configured CHAP authentication in "Step 5: Configure CHAP Authentication on the Storage Array (Optional)" on page 62, complete the following steps. If not, skip to "Step 7: Connect to the Target Storage Array from the Host Server" on page 68. Select the set of steps in one of the following sections (Windows or Linux) that corresponds to your operating system. If you are using Windows Server® 2008 GUI version: 1 Click Start Programs Microsoft iSCSI Initiator or click Start All Programs Administrative Tools iSCSI Initiator. 2 If you are not using mutual CHAP authentication, go to the step 4. 3 If you are using mutual CHAP authentication, click the General tab and select Secret. At Enter a secure secret, enter the mutual CHAP secret you entered for the storage array 4 Click the Discovery tab. 64 Appendix-Manual Configuration

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82

64
Appendix—Manual Configuration
Configuring Mutual CHAP Authentication on the Storage Array
The initiator secret must be unique for each host server that connects to the
storage array and must not be the same as the target CHAP secret.
Change the initiator authentication settings in the
Change Target
Authentication
window. Use these options to change the settings:
None
—Select
None
if you permit no initiator authentication. If you select
None
, any initiator can access this target. Use this option only if you do
not require secure data. However, you can select both
None
and
CHAP
at
the same time.
CHAP
—Select
CHAP
if you want to enable an initiator that tries to
access the target to authenticate using CHAP. Define the CHAP secret
only if you want to use mutual CHAP authentication. If you select
CHAP
,
and if no CHAP target secret is defined, an error message appears. Click
CHAP Secret
to view the
Enter CHAP Secre
t windows. Use this window
to define the CHAP secrets.
NOTE:
To remove a CHAP secret, you must delete the host initiator and re-add it.
Step 6: Configure CHAP Authentication on the
Host Server (Optional)
If you configured CHAP authentication in "Step 5: Configure CHAP
Authentication on the Storage Array (Optional)" on page 62, complete the
following steps. If not, skip to "Step 7: Connect to the Target Storage Array
from the Host Server" on page 68.
Select the set of steps in one of the following sections (Windows or Linux)
that corresponds to your operating system.
If you are using
Windows Server
®
2008 GUI version
:
1
Click
Start
Programs
Microsoft iSCSI Initiator
or click
Start
All
Programs
Administrative Tools
iSCSI Initiator
.
2
If you are not using mutual CHAP authentication, go to the step 4.
3
If you are using mutual CHAP authentication, click the
General
tab and
select
Secret
. At
Enter a secure secret
, enter the mutual CHAP secret you
entered for the storage array
4
Click the
Discovery
tab.