Enabling CHAP Authentication with QConvergeConsole: QLogic QME8242 Mezzanine Card User’s Guide
file:///T|/htdocs/NETWORK/QLogic/71922/en/chapauth.htm[9/26/2012 4:25:45 PM]
Back to Contents Page
Enabling CHAP Authentication with QConvergeConsole: QLogic
QME8242 Mezzanine Card User’s Guide
You can enable CHAP authentication with either the interactive mode or non-interactive mode of QConvergeConsole CLI. For
details on the interactive mode, refer to the
QConvergeConsole CLI User’s Guide
. For the non-interactive mode of the
QConvergeConsole CLI, the following sections describes how to enable CHAP:
Configuring CHAP with QConvergeConsole CLI
Linking to a CHAP Target
NOTE:
Information on installing and starting the GUI version of
QLogic's QConvergeConsole utility
is provided in the
QConvergeConsole User's Guide
. All procedural information for that utility is covered in the online help system.
Configuring CHAP with QConvergeConsole CLI
To configure CHAP with QConvergeConsole CLI:
1. To add a primary and local CHAP entry (name and secret), issue the -addchap command to add a CHAP entry to the
persistent CHAP table. The positional parameters are <hba_port_inst>, <CHAP name>, and <CHAP secret>. The
optional parameter is [-BIDI] indicating the CHAP entry is a bidirectional entry (default is local CHAP). The adapter is
reset after this command is issued.
NOTE:
The
iSCSI RFC Specification
recommends a minimum CHAP secret length of 12 bytes or characters. The
maximum CHAP secret length for QLogic iSCSI cards (the firmware limit) is 100 bytes or characters.
Command line options:
[-BIDI] -addchap <hba_port_inst> <CHAP name> <CHAP secret>
Examples:
In the following examples, the HBA port instance = 0, the CHAP name = chapdbserver1, and the CHAP secret =
k9Q038iaZwlqPplq012.
$qaucli -pr iscsi -addchap 0 chapdbserver1 k9Q038iaZwlqPplq012
Or:
$qaucli –iscsi -addchap 0 chapdbserver1 k9Q038iaZwlqPplq012
2. To add a peer and BIDI CHAP entry (name and secret), issue the -addchap command to add a CHAP entry to the
persistent CHAP table. The positional parameters are <hba_port_inst>, <CHAP name>, and <CHAP secret>. The
optional parameter is [-BIDI] indicating the CHAP entry is a BIDI entry (default is local CHAP). The adapter is reset
after this command is issued.
Command line options:
[-BIDI] -addchap <hba_port_inst> <CHAP name> <CHAP secret>
Example:
In the following examples, the HBA port instance = 2, the CHAP name = chapbidistorage1, and the CHAP secret =
Z9aujqklaZwlqPplq0827.
$qaucli -pr iscsi -BIDI -addchap 2 chapbidistorage1 Z9aujqklaZwlqPplq0827
Or:
$qaucli - iscsi -BIDI -addchap 2 chapbidistorage1 Z9aujqklaZwlqPplq0827
3. To view the CHAP map table to determine the CHAP index to use later to link the CHAP entry to a target, issue the –
dspchap command. The positional parameter for this command is <hba_port_inst>.
Command line options:
