HP XP20000/XP24000 HP StorageWorks MPX200 Multifunction Router User Guide (569 - Page 107

Enabling single-direction CHAP during discovery session and normal session, Single-direction

Page 107 highlights

• Single-direction-The target authenticates the identity of the initiator with the user-provided CHAP secret. To enable single-direction CHAP, you must enable CHAP for a specific initiator record on the MPX200 and enter a corresponding CHAP secret from the iSCSI host. • Bidirectional-The initiator and target authenticate each other's identity by using the user-provided CHAP secrets. To enable bidirectional CHAP for a discovery session, you must provide a CHAP secret for the initiator and for the iSCSI port for which you are performing discovery. To enable bidirectional CHAP for a normal session, you must provide a CHAP secret for the initiator and for the iSCSI-presented target that you want to log in to. • Single-direction CHAP during discovery session and during normal session • Single-direction CHAP during discovery session and bidirectional CHAP during normal session • Bidirectional CHAP during discovery session and single-direction CHAP during normal session • Bidirectional CHAP during discovery session and during normal session Enabling single-direction CHAP during discovery session and normal session Table 12 lists the settings you use to enable single-direction CHAP during a discovery session and normal session. Table 12 CHAP single-direction settings MPX200 secret settings1 Source Setting (example) iSCSI Port N/A Discovered iSCSI Initiator CHAPsecret01 Microsoft initiator secret settings1 Action Setting (example) General Tab Secret N/A Add Target Portal CHAPsecret01 iSCSI Presented Target N/A Log on to Target CHAPsecret01 1These are examples of secret settings. Configure CHAP using settings that apply to your network environment. To enable CHAP for the MPX200-discovered iSCSI initiator entry: • If the iSCSI initiator is not listed when you execute the set chap command, do one of the following: • From HP Command View EVA, select Hosts, and then select the Add Host tab. Enter the IQN string. • From the CLI, use the add command to add the iSCSI initiator that will perform the discovery. • If the iSCSI initiator is listed when you execute the set chap command, then enable the CHAP secret (for example, CHAPsecret01): 1. Select the index of the iSCSI initiator. 2. Enable CHAP by selecting 0 and then entering the CHAP secret. To enable CHAP for the Microsoft iSCSI initiator: 1. Click Discovery. • To discover iSCSI target portals manually: a. Click Add under Target Portals. b. Enter the IP address of the MPX200 iSCSI port. c. Click Advanced. d. Select the CHAP Login Information check box. MPX200 Multifunction Router User Guide 107

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282

Single-direction
The target authenticates the identity of the initiator with the user-provided CHAP
secret. To enable single-direction CHAP, you must enable CHAP for a specific initiator record on
the MPX200 and enter a corresponding CHAP secret from the iSCSI host.
Bidirectional
The initiator and target authenticate each other's identity by using the user-provided
CHAP secrets. To enable bidirectional CHAP for a discovery session, you must provide a CHAP
secret for the initiator and for the iSCSI port for which you are performing discovery. To enable
bidirectional CHAP for a normal session, you must provide a CHAP secret for the initiator and for
the iSCSI-presented target that you want to log in to.
Single-direction CHAP during discovery session and during normal session
Single-direction CHAP during discovery session and bidirectional CHAP during normal session
Bidirectional CHAP during discovery session and single-direction CHAP during normal session
Bidirectional CHAP during discovery session and during normal session
Enabling single-direction CHAP during discovery session and normal session
Table 12
lists the settings you use to enable single-direction CHAP during a discovery session and
normal session.
Table 12 CHAP single-direction settings
Microsoft initiator secret settings
1
MPX200 secret settings
1
Setting (example)
Action
Setting (example)
Source
N/A
General Tab Secret
N/A
iSCSI Port
CHAPsecret01
Add Target Portal
CHAPsecret01
Discovered iSCSI Initiator
CHAPsecret01
Log on to Target
N/A
iSCSI Presented Target
1
These are examples of secret settings. Configure CHAP using settings that apply to your network environment.
To enable CHAP for the MPX200-discovered iSCSI initiator entry:
If the iSCSI initiator is
not
listed when you execute the
set chap
command, do one of the follow-
ing:
From HP Command View EVA, select
Hosts
, and then select the
Add Host
tab. Enter the IQN
string.
From the CLI, use the
add
command to add the iSCSI initiator that will perform the discovery.
If the iSCSI initiator
is
listed when you execute the
set chap
command, then enable the CHAP
secret (for example, CHAPsecret01):
1.
Select the index of the iSCSI initiator.
2.
Enable CHAP by selecting 0 and then entering the CHAP secret.
To enable CHAP for the Microsoft iSCSI initiator:
1.
Click
Discovery
.
To discover iSCSI target portals manually:
a.
Click
Add
under Target Portals.
b.
Enter the IP address of the MPX200 iSCSI port.
c.
Click
Advanced
.
d.
Select the
CHAP Login Information
check box.
MPX200 Multifunction Router User Guide
107