Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 118

- CHAP user name - Password (otherwise known as a CHAP secret). For optimal security, passwords must contain at least 12 characters (preferably random). Individual iSCSI initiators have their own rules and restrictions for length and format. Consult your initiator documentation for details. To create a local CHAP account: 1. Click Group → Group Configuration. 2. Click the iSCSI tab. 3. (Optional) Select Enable local authentication and check local first in the iSCSI Authentication panel. 4. In the Local CHAP Accounts panel, click Add to open the Add CHAP Account dialog box. 5. Type a CHAP user name and, optionally, a password. • The user name can be up to 63 printable characters (any characters except space and colon). NOTE: If the user name contains a pound-sign character, enclose the name in quotation marks (for example, "chap#user"). Otherwise, the system will read the characters after the pound sign as a comment and not include them in the user name. • The password can be up to 255 printable characters (any characters except space and colon). If you do not enter a password, the group automatically generates a password that is 16 characters long). 6. Select whether to enable the account. You must enable an account to use it for initiator authentication. You can modify an account and enable or disable it later. 7. Click OK. 8. Click Save all changes. NOTE: In the iSCSI initiator authentication area, you can select Enable RADIUS authentication for iSCSI initiators, Consult locally defined CHAP accounts first, or both. Make sure that at least one of these choices is selected. If neither option is selected, the PS Series group will lock out all iSCSI initiator logins. After creating the CHAP account, you can: • Create an access control policy and use the CHAP user name in the policy • Enable target authentication (for mutual authentication) Modify a Local CHAP Account To modify a local CHAP account: 1. Click Group → Group Configuration. 2. Click the iSCSI tab. 3. In the Local CHAP Account panel, select the account name that you want to edit and click Modify. The Modify CHAP Account dialog box opens. 4. Change the name or password or enable or disable the account, as needed. 5. Click OK. Delete a Local CHAP Account To delete a local CHAP account: 1. Click Group → Group Configuration. 2. Click the iSCSI tab. 3. In the Local CHAP Account panel, select the CHAP account that you want to remove and click Delete. 4. Confirm the deletion by clicking the Yes button. 118 About Volume-Level Security