HP MSA 1040 HP MSA 1040 SMU Reference Guide (762784-001, March 2014) - Page 76

Configuring CHAP, To create an explicit mapping, To add or modify a CHAP entry, To delete a CHAP entry

Page 76 highlights

To create an explicit mapping 1. In the Maps for Host table, select the Default mapping to override. 2. Select Map. 3. Set the LUN and select the ports and access type. 4. Click Apply. A message specifies whether the change succeeded or failed. 5. Click OK. The mapping becomes Explicit with the new settings. To modify an explicit mapping 1. In the Maps for Host table, select the Explicit mapping to change. 2. Set the LUN and select the ports and access type. 3. Click Apply. A message specifies whether the change succeeded or failed. 4. Click OK. The mapping settings are updated. To delete an explicit mapping 1. In the Maps for Host table, select the Explicit mapping to delete. 2. Clear Map. 3. Click Apply. A message specifies whether the change succeeded or failed. 4. Click OK. The mapping returns to the Default mapping. Configuring CHAP For iSCSI, you can use Challenge-Handshake Authentication Protocol (CHAP) to perform authentication between the initiator and target of a login request. To perform this identification, a database of CHAP entries must exist on each device. Each CHAP entry can specify one name-secret pair to authenticate the initiator only (one-way CHAP) or two pairs to authenticate both the initiator and the target (mutual CHAP). For a login request from an iSCSI host to a storage system, the host is the initiator and the storage system is the target. To enable or disable CHAP for all iSCSI hosts, see "Changing host interface settings" (page 46). To add or modify a CHAP entry 1. In the Configuration View panel, right-click Hosts or a specific host and then select Provisioning > Configure CHAP. If any CHAP entries exist, a table shows them by node name. 2. Optionally, select an entry whose name you want to change to create a new entry. The entry's values appear in the option fields. 3. Set the options: • Node Name (IQN). The initiator name, typically in IQN format. • Secret. The secret that the target uses to authenticate the initiator. The secret is case sensitive and can include 12-16 bytes. • Name, if mutual CHAP. Optional; for mutual CHAP only. Specifies the target name, typically in IQN format. The value is case sensitive and can include a maximum of 223 bytes. To find a controller iSCSI port's IQN, select the controller enclosure, view the Enclosure Overview panel (page 111), select the Rear Graphical tab, select an iSCSI port, and view the Target ID field. • Secret, if mutual CHAP. Optional; for mutual CHAP only. Specifies the secret that the initiator uses to authenticate the target. The secret is case sensitive, can include 12-16 bytes, and must differ from the initiator secret. A storage system's secret is shared by both controllers. 4. Click Add/Modify Entry. If the task succeeds, the new or modified entry appears in the CHAP entries table. To delete a CHAP entry 1. In the Configuration View panel, right-click Hosts or a specific host and then select Provisioning > Configure CHAP. If any CHAP entries exist, a table shows them by node name. 2. Select the entry to delete. 3. Click Delete Entry. If the task succeeds, the entry is removed from the CHAP entries table. 76 Provisioning the system

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190

76
Provisioning the system
To create an explicit mapping
1.
In the Maps for Host table, select the Default mapping to override.
2.
Select
Map
.
3.
Set the LUN and select the ports and access type.
4.
Click
Apply
. A message specifies whether the change succeeded or failed.
5.
Click
OK
. The mapping becomes Explicit with the new settings.
To modify an explicit mapping
1.
In the Maps for Host table, select the Explicit mapping to change.
2.
Set the LUN and select the ports and access type.
3.
Click
Apply
. A message specifies whether the change succeeded or failed.
4.
Click
OK
. The mapping settings are updated.
To delete an explicit mapping
1.
In the Maps for Host table, select the Explicit mapping to delete.
2.
Clear
Map
.
3.
Click
Apply
. A message specifies whether the change succeeded or failed.
4.
Click
OK
. The mapping returns to the Default mapping.
Configuring CHAP
For iSCSI, you can use Challenge-Handshake Authentication Protocol (CHAP) to perform authentication between the
initiator and target of a login request.
To perform this identification, a database of CHAP entries must exist on each device. Each CHAP entry can specify
one name-secret pair to authenticate the initiator only (one-way CHAP) or two pairs to authenticate both the initiator
and the target (mutual CHAP). For a login request from an iSCSI host to a storage system, the host is the initiator and
the storage system is the target.
To enable or disable CHAP for all iSCSI hosts, see
"Changing host interface settings" (page 46)
.
To add or modify a CHAP entry
1.
In the Configuration View panel, right-click
Hosts
or a specific host and then select
Provisioning > Configure
CHAP
. If any CHAP entries exist, a table shows them by node name.
2.
Optionally, select an entry whose name you want to change to create a new entry. The entry’s values appear in
the option fields.
3.
Set the options:
Node Name (IQN). The initiator name, typically in IQN format.
Secret. The secret that the target uses to authenticate the initiator. The secret is case sensitive and can include
12–16 bytes.
Name, if mutual CHAP. Optional; for mutual CHAP only. Specifies the target name, typically in IQN format.
The value is case sensitive and can include a maximum of 223 bytes. To find a controller iSCSI port’s IQN,
select the controller enclosure, view the Enclosure Overview panel (
page 111
), select the Rear Graphical tab,
select an iSCSI port, and view the Target ID field.
Secret, if mutual CHAP. Optional; for mutual CHAP only. Specifies the secret that the initiator uses to
authenticate the target. The secret is case sensitive, can include 12–16 bytes, and must differ from the initiator
secret. A storage system's secret is shared by both controllers.
4.
Click
Add/Modify Entry
. If the task succeeds, the new or modified entry appears in the CHAP entries table.
To delete a CHAP entry
1.
In the Configuration View panel, right-click
Hosts
or a specific host and then select
Provisioning > Configure
CHAP
. If any CHAP entries exist, a table shows them by node name.
2.
Select the entry to delete.
3.
Click
Delete Entry
. If the task succeeds, the entry is removed from the CHAP entries table.