Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 120

With target authentication, when the initiator tries to connect to a target, the target supplies a user name and password to the initiator. The initiator compares the user name and password to mutual authentication credentials that you configure in the initiator configuration interface. The iSCSI connection succeeds only if the information matches. A group automatically enables target authentication using a default user name and password, which you can change. Whether the initiator requires target authentication depends on the initiator configuration settings. To display the current target authentication user name and password: 1. Click Group → Group Configuration. 2. Click the iSCSI tab. 3. In the iSCSI Authentication panel, click Modify. The Modify Target CHAP Account dialog box opens. 4. In the dialog box, type the target authentication user name and password. 5. Click OK to save the changes. About iSNS Servers In a shared storage environment, you must control computer access to iSCSI targets (volumes and snapshots), because multiple computers writing to a target in an uncoordinated manner might result in volume corruption. When an initiator tries to log in to a target, the group uses access control policies to determine if access should be authorized. However, access control policies do not prevent multiple initiators, either on the same computer or different computers, from accessing the same target. Therefore, by default, the group disables multihost (shared) access to a target. Only one iSCSI qualified name (IQN) can connect to a target at one time. If all group members are not running PS Series firmware version 6.0 or later, the group allows multihost access to targets. An iSNS (Internet Storage Name Service) server can facilitate iSCSI initiator discovery of iSCSI targets in a SAN. Prerequisites for Configuring an iSNS Server The following considerations might apply when configuring an iSNS server: • By default, the group disables target discovery by iSNS servers. If you want iSNS servers to discover a target, you must enable this functionality on the target. Set up the iSNS server and configure the iSCSI initiator to use the iSNS server for discovery. See your iSNS server and iSCSI initiator documentation for details. • The iSNS server must be accessible to all the group members. • A group disables automatic discovery of group targets by iSNS servers only if all the group members are running PS Series firmware version 6.0 or later. If a member is running an earlier firmware version, iSNS servers can automatically discover all group targets. • You can specify up to three IP addresses. The group uses only one iSNS server at a time. The first server listed is the default server. If the default server is not available, the group uses the other servers in the order in which they were specified. Click the Up and Down arrows to change the IP address order. • If you are using a port number other than the default of 3205, you need an IP address for each iSNS server in the format nnn.nnn.nnn.nnn:port. Enable or Disable iSNS Discovery You can configure a PS Series group to use an iSNS (Internet Storage Name Service) server, which facilitates the discovery of iSCSI targets in the group. By default, the group disables automatic discovery of targets by iSNS servers. If you want an iSNS server to automatically discover a group target, you must enable this functionality on the target. 120 About Volume-Level Security