Chapter 7
Controlling Access to Your IP SAN
This chapter describes how to use Adaptec Storage Manager to restrict and control
access to your IP SAN and iSCSI targets (logical devices) with auto-discovery
control lists, authentication, and the Security Manager.
Limiting Discovery of iSCSI Targets with Discovery Control
Lists
If you want to limit which iSCSI initiators can discover an iSCSI target (logical
device), you can create a discovery control list which will allow one or more
specified iSCSI initiators to discover an iSCSI target while preventing other iSCSI
initiators from discovering it, as illustrated in this figure.
Each iSCSI target can have its own auto-discovery control list, with specified iSCSI
initiators that are permitted to discover it.
Note
Discovery control lists don’t prevent iSCSI initiators from logging into iSCSI
targets that aren’t on their control lists. If you are using iSNS to discover iSCSI
targets and want to control which logical devices are logged into by which iSCSI
initiators, you must set CHAP authentication. Without CHAP authentication, all
iSCSI initiators will be able to log in to all iSCSI targets. See “Controlling Access to
Your IP SAN with Authentication” on page 85 for more information.
iSCSI
Discovery control list
denies discovery to
Initiator B
Discovery control list allows
Initiator A to discover target
iSCSI Initiator A
iSCSI Initiator B
iSCSI Target
Summary of Contents for 5325302053 - Snap Server 720i NAS
Page 1: ...Snap Server 700i Series User s Guide for Adaptec OnTarget Powered Snap Servers ...
Page 6: ......
Page 12: ...6 Snap Server 700i User s Guide ...
Page 18: ......
Page 32: ......
Page 88: ......
Page 96: ......
Page 120: ......
Page 168: ......
Page 184: ......
Page 194: ......
Page 214: ......
Page 218: ......