HP XP20000/XP24000 HP StorageWorks MPX200 Multifunction Router User Guide (569 - Page 106

Microsoft initiator CHAP secret restrictions, Linux CHAP restrictions

Page 106 highlights

• Maximum length of 100 characters • Minimum length of 1 character Microsoft initiator CHAP secret restrictions The Microsoft initiator CHAP secret restrictions are: • Maximum length of 16 characters • Minimum length of 12 characters • When an initiator uses iSNS for target discovery, only normal session CHAP applies NOTE: There is no restriction on the type of characters that can be entered. Linux CHAP restrictions The Linux CHAP restrictions are: • CHAP is supported with the Linux open-iscsi initiator and MPX200. • CHAP setup with Linux iSCSI initiator is not supported with the MPX200. ATTO Macintosh CHAP restrictions The ATTO Macintosh iSCSI initiator does not support CHAP at this time. Recommended CHAP policies The following CHAP policies are recommended: • The same CHAP secret should not be configured for authentication of multiple initiators or targets. • Any CHAP secret used for initiator authentication must not be configured for authentication of any target. Any CHAP secret used for target authentication must not be configured for authentication of any initiator. • CHAP should be configured after the initial iSCSI initiator/target login to validate initiator/target connectivity. The first initiator/target login creates a discovered iSCSI initiator entry on the MPX200 that is used in the CHAP setup. iSCSI session types iSCSI defines two types of sessions: • Discovery-SCSI discovery enables an initiator to find the targets to which it has access. • Normal-A normal session is unrestricted. CHAP is enforced on both discovery and normal sessions. MPX200 CHAP modes The MPX200 supports two CHAP modes. Once CHAP is enabled, it is enforced for both discovery sessions and normal sessions. You can choose only the CHAP mode: 106 MPX200 iSCSI configuration rules and guidelines

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282

Maximum length of 100 characters
Minimum length of 1 character
Microsoft initiator CHAP secret restrictions
The Microsoft initiator CHAP secret restrictions are:
Maximum length of 16 characters
Minimum length of 12 characters
When an initiator uses iSNS for target discovery, only normal session CHAP applies
NOTE:
There is no restriction on the type of characters that can be entered.
Linux CHAP restrictions
The Linux CHAP restrictions are:
CHAP is supported with the Linux
open-iscsi
initiator and MPX200.
CHAP setup with Linux iSCSI initiator is not supported with the MPX200.
ATTO Macintosh CHAP restrictions
The ATTO Macintosh iSCSI initiator does not support CHAP at this time.
Recommended CHAP policies
The following CHAP policies are recommended:
The same CHAP secret should not be configured for authentication of multiple initiators or targets.
Any CHAP secret used for initiator authentication must not be configured for authentication of any
target. Any CHAP secret used for target authentication must not be configured for authentication
of any initiator.
CHAP should be configured after the initial iSCSI initiator/target login to validate initiator/target
connectivity. The first initiator/target login creates a discovered iSCSI initiator entry on the MPX200
that is used in the CHAP setup.
iSCSI session types
iSCSI defines two types of sessions:
Discovery
SCSI discovery enables an initiator to find the targets to which it has access.
Normal
A normal session is unrestricted.
CHAP is enforced on both discovery and normal sessions.
MPX200 CHAP modes
The MPX200 supports two CHAP modes. Once CHAP is enabled, it is enforced for both discovery
sessions and normal sessions. You can choose only the CHAP mode:
MPX200 iSCSI configuration rules and guidelines
106