Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 82

• In the Modify Basic Access Point dialog box, change the CHAP user name, iSCSI initiator name, or IP address, then click OK. 4. Click OK. Delete a VDS/VSS Access Control Policy 1. Click Group → Group Configuration. 2. Click the VDS/VSS tab. 3. Select the policy from the appropriate subpanel (Access policy groups, Access policies, or Basic access points) and click the corresponding Delete command. 4. Confirm that you want to delete the policy. When you delete or modify a basic access point, you might need to update any computer that was previously accessing volumes through that access point. About IPsec IPsec is a set of standardized protocols designed to allow systems on IP-based networks to verify each other's identities and create secured communication links. IPsec uses cryptographic security mechanisms for authentication and protection. IPsec validates the identity of devices communicating over IP-based networks, encrypts all data passing between participating systems, and protects against disclosure, modification, eavesdropping, and attack. IPsec is supported for both IPv4 and IPv6 networks. NOTE: For more general information about IPsec, refer to the website of the Internet Engineering Task Force (ietf.org), the organization that originally developed the IPsec protocols. In the context of an iSCSI SAN that uses EqualLogic PS Series storage arrays, IPsec secures communications between group member arrays and also between iSCSI initiators and the group. You can use policies to configure your IPsec implementation to protect iSCSI traffic based on initiator IP address, initiators in a specific subnet, or network protocol. IPsec authentication is handled using certificates or pre-shared keys. Types of Protected Traffic The types of traffic protected by IPsec are shown in Figure 9. What IPsec Protects. Figure 9. What IPsec Protects IP Traffic Protection To enable IPsec protection for traffic between the group and iSCSI initiators, use the following basic process: 82 About Group-Level Security