Home » Adaptec Manuals » Network Storage Servers » Adaptec 5325301656 » Manual Viewer

Adaptec 5325301656 Administration Guide - Page 85

Using CHAP Authentication to Enable Multiple Linux Systems to Share iSCSI

UPC - 753253016563

Add to My Manuals
Save this manual to your list of manuals

Page 85 highlights

Configuring iSCSI Initiators • The QLogic QLA4010/4050 hardware initiator supports Red Hat Enterprise Linux 3, QU5; Red Hat Enterprise Linux 4, QU1; and SuSE Linux Enterprise Server 9, SP3. This initiator provides CHAP authentication and can connect to multiple targets simultaneously. The SANSurfer utility is included with the HBA to initiate, monitor, and change iSCSI targets using its text-based user interface. • The Cisco-based in-box iSCSI software initiators for Linux support Red Hat Enterprise Linux 3, QU6, Red Hat Enterprise Linux 4, QU2, and SuSE Linux Enterprise Server 9, SP3. • The Open iSCSI-based in-box iSCSI software initiators for Linux support RedHat Linux 4 QU5 and higher, SuSE Linux Enterprise Server 10, SP1 and higher and CentOS 5.0 and higher. • The Open iSCSI-based in-box iSCSI software initiator for UNIX supports Solaris 10 U4. Installation and configuration information for the QLogic QLA4010/4050 HBA is included with the adapter and is also available for download from the QLogic website. Information about the in-box iSCSI intitiators is available from the RedHat, Novell (SuSE Linux), and Sun Microsystems web sites. Using CHAP Authentication to Enable Multiple Linux Systems to Share iSCSI Disks Securely on a Snap Server You can use CHAP authetication to enable multiple Linux systems with in-box initiators to share different iSCSI disks on a Snap server or Snap servers. To do this, you would set up different Usernames and Passwords for a DiscoveryAddress. For example, on a Snap server (IP address:192.3.2.193), iSCSI disks can be configured for System A and System B. With CHAP enabled, set the System A Username to a, and set the Password to PasswordForA. Then, for system B, set the Username b, and set the Password to PasswordForB. The configuration will look like the following: In System A's /etc/iscsi.conf, enter the following: DiscoveryAddress=192.3.2.193 Username=a Password=PasswordForA In System B's /etc/iscsi.conf, enter the following: DiscoveryAddress=192.3.2.193 Username=b Password=PasswordForB System A and B can connect to their own iSCSI disks on the same Snap Server (IP address 192.3.2.193) without the possibility of data corruption caused by sharing the same iSCSI disk. 71

Section	Page
Contents	7
Administrative Overview	15
GuardianOS Specifications	16
What’s New in GuardianOS	19
Snap Server Manager	23
Connecting to the Server for the First Time	26
Using the Initial Setup Wizard	28
Determining Capacity	29
Scheduling Data Protection Tasks	30
Migrating Data from Legacy Servers to the Snap Server	30
Configuring the Snap Server as a Print Server	31
Configuring an APC-Brand UPS	31
SnapExtensions	31
Network Access to the Server	33
Viewing Current Network Settings	34
TCP/IP Options	35
Configuring TCP/IP Settings	37
Default Network Protocol Settings	39
Windows Networking Configuration	40
Support for Windows Networking (SMB)	40
Support for Windows Network Authentication	41
NFS Access	44
Apple Networking Configuration	45
FTP Access	47
HTTP/HTTPS Access (Web View)	47
DHCP Server	48
Print Server	48
User & Group Management	51
Default User and Group Settings	52
UID and GID Assignments	52
Local Users and Groups	53
NIS Domain	54
Storage Configuration and Expansion	55
Default Storage Configuration	56
Changing the Default Storage Configuration	56
RAIDs	57
RAID Groups	59
Volumes	61
Quotas	63
Setting User Quotas	64
Data Migration	64
Preserving Permissions	65
Expansion Arrays	66
The SANbloc S50	66
Managing Expansion Array Storage	67
Disks and Units	69
Replacing Disk Drives on a RAID	69
Adding Disk Drives to a RAID	70
Hot Swapping Disk Drives	70
iSCSI Disks	77
Configuring iSCSI Initiators	78
iSCSI Configuration for Microsoft Windows using MS Initiator	79
Configuring the QLogic QLA4010 and QLA4050 iSCSI Initiators for Microsoft Windows	84
iSCSI Configuration for Linux and UNIX	84
iSCSI Configuration for Novell NetWare	86
iSCSI Configuration for VMware	86
iSCSI Configuration on the Snap Server	87
Creating iSCSI Disks	90
Share and File Access	93
Configuring Share and Folder Security Overview	94
Components and Options	96
SnapTrees and Security Models	98
ID Mapping	100
Creating Shares	101
Configuring Share Access	102
Share Access Behaviors	102
Setting Share Access Permissions	103
Creating Home Directories	104
Windows ACLs	104
Setting File and Directory Access Permissions and Inheritance (Windows)	105
Security Guides	106
Snapshots	109
Snapshot Management and Usage	110
Estimating Snapshot Pool Requirements	111
Adjusting Snapshot Pool Size	112
Accessing Snapshots	112
Coordinating Snapshot and Backup Operations	113
Disaster Recovery	115
Backing Up Server and Volume Settings	115
Backing Up the NetVault Database Directory	118
Recovering the NetVault Database	119
Disaster Recovery Procedural Overview	121
CA eTrust Antivirus Software	123
Antivirus Dependencies	124
Launching the CA eTrust Antivirus GUI	125
The Local Scanner View	126
Scan Job Configuration and Scheduling	127
Defining Scan Jobs	127
Running a Manual Scan Job	128
Scheduling a Scan Job	128
Signature Updates	129
Updating Snap Servers that have Internet Access	130
Updating a Snap Server that does not have Internet Access	131
Distributing Updates from One Server to Another	131
Verifying Download Events	133
Alert Options	134
The Move Directory	134
Log View	135
Unicode	137
What is Unicode?	137
Converting to Unicode	137
Unicode and Protocol Interaction	139
How Snapshots Interact with Unicode	141
Backing Up Unicode Servers	141
Unicode and Expansion Arrays	143
Backup and Replication Solutions	145
Integrated Backup Solutions for the Snap Server	146
BakBone Netvault	146
Snap Enterprise Data Replicator (Snap EDR)	147
Off-the-Shelf Backup Solutions for the Snap Server	149
Preparing to Install a Backup Solution	149
Preinstallation Tasks	150
Installing the CA BrightStor ARCserve Agent	151
Installing the Symantec Backup Exec RALUS Agent	154
Installing the Symantec NetBackup v6.5 Client	157
Installing the EMC Legato NetWorker Client	159
Command Line Interface	165
SnapCLI Syntax	165
Scripts in SnapCLI	168
Troubleshooting Snap Servers	173
The Meaning of LED Indicators	174
Snap Server 110/210 Status and Drive Light Behavior	174
Snap Server 410 Status and Drive Light Behavior	176
Snap Server 500 Series/600 Series Status and Drive Light Behavior	177
Snap Server 4200/4500 Status and Drive Light Behavior	180
Snap Server 18000 Status and Drive Light Behavior	182
SANbloc S50 Enclosure, Disk Drive, APC Module, and Controller Behavior	185
Snap Disk 10 Disk Drive and Power Supply Module LEDs	188
Snap Disk 30SA Disk Drive and Power/Fan Module Behavior	189
System Reset Options	192
Resetting the Snap Server to Factory Defaults	192
Performing System Resets Without Network Access	193
Networking Issues	194
Miscellaneous Issues	198
Phone Home Support	200
GuardianOS Ports	201
Glossary	207

Match case Limit results 1 per page

Configuring iSCSI Initiators

•

The QLogic QLA4010/4050 hardware initiator supports Red Hat Enterprise

Linux 3, QU5; Red Hat Enterprise Linux 4, QU1; and SuSE Linux Enterprise

Server 9, SP3. This initiator provides CHAP authentication and can connect to

multiple targets simultaneously. The SANSurfer utility is included with the HBA

to initiate, monitor, and change iSCSI targets using its text-based user interface.

•

The Cisco-based in-box iSCSI software initiators for Linux support Red Hat

Enterprise Linux 3, QU6, Red Hat Enterprise Linux 4, QU2, and SuSE Linux

Enterprise Server 9, SP3.

•

The Open iSCSI-based in-box iSCSI software initiators for Linux support RedHat

Linux 4 QU5 and higher, SuSE Linux Enterprise Server 10, SP1 and higher and

CentOS 5.0 and higher.

•

The Open iSCSI-based in-box iSCSI software initiator for UNIX supports

Solaris 10 U4.

Installation and configuration information for the QLogic QLA4010/4050 HBA is

included with the adapter and is also available for download from the QLogic

website. Information about the in-box iSCSI intitiators is available from the RedHat,

Novell (SuSE Linux), and Sun Microsystems web sites.

Using CHAP Authentication to Enable Multiple Linux Systems to Share iSCSI

Disks Securely on a Snap Server

You can use CHAP authetication to enable multiple Linux systems with in-box

initiators to share different iSCSI disks on a Snap server or Snap servers. To do this,

you would set up different Usernames and Passwords for a DiscoveryAddress.

For example, on a Snap server (IP address:192.3.2.193), iSCSI disks can be

configured for System A and System B. With CHAP enabled, set the System A

Username to

, and set the Password

PasswordForA

. Then, for system B,

set the

Username

, and set the Password to

PasswordForB

. The configuration will look like

the following:

In System A's

/etc/iscsi.conf

, enter the following:

DiscoveryAddress=192.3.2.193

Username=a

Password=PasswordForA

In System B's

/etc/iscsi.conf

, enter the following:

DiscoveryAddress=192.3.2.193

Username=b

Password=PasswordForB

System A and B can connect to their own iSCSI disks on the same Snap Server (IP

address 192.3.2.193) without the possibility of data corruption caused by sharing

the same iSCSI disk.