HP MSA 1040 HP MSA 1040 CLI Reference Guide (762782-001, March 2014) - Page 45
create chap-record, parameter
View all HP MSA 1040 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 45 highlights
create chap-record Description For iSCSI, creates a CHAP record to authenticate login requests. When CHAP is enabled, the record enables authentication between the originator (initiator) and recipient (target) of a login request. This command is permitted whether or not CHAP is enabled. The CHAP record can specify one name-secret pair to authenticate the originator only (one-way CHAP) or two pairs to authenticate both the originator and the recipient (mutual CHAP). For a login request from an iSCSI host to a storage system, the host is the originator and the storage system is the recipient. Syntax create chap-record name originator-name secret originator-secret [mutual-name recipient-name mutual-secret recipient-secret] Parameters name originator-name The originator name, typically in IQN format. The name can have a maximum of 223 bytes, including 0-9, lowercase a-z, hyphen, colon, and period. secret originator-secret The secret that the recipient uses to authenticate the originator. The secret is case sensitive and can include 12-16 bytes. mutual-name recipient-name Optional; for mutual CHAP only. The recipient name, typically in IQN format. The name can have a maximum of 223 bytes, including 0-9, lowercase a-z, hyphen, colon, and period. To determine a storage system's IQN, use the show ports command to view an iSCSI port Target ID value. This parameter and mutual-secret must be set together. mutual-secret recipient-secret Optional; for mutual CHAP only. The secret that the originator uses to authenticate the recipient. The secret is case sensitive, can include 12-16 bytes, and must differ from the originator secret. A storage system's secret is shared by both controllers. This parameter and mutual-name must be set together. Example Create a one-way CHAP record to enable a storage system to authenticate a host initiator: # create chap-record name iqn.1991-05.com.microsoft:myhost.domain secret 123456abcDEF Success: Command completed successfully. (iqn.1991-05.com.microsoft:myhost.domain)- A CHAP record was created. (2012-01-18 12:39:07) See also • delete chap-records • set chap-record • show chap-records • show host-parameters • show iscsi-parameters create chap-record 45