----End
4.19 Enabling the CHAP Authentication
This section introduces the procedure for enabling the CHAP Authentication.
Context
When the AS is connected to the VIS6000 through an iSCSI interface, the CHAP authentication
is disabled by default. To connect the AS to the VIS6000 through the CHAP authentication, you
can allocate a CHAP to the iSCSI initiator and enable the CHAP authentication. Enabling the
CHAP authentication improves the security when the AS accesses the VIS6000.
CAUTION
l
Before enabling the CHAP authentication, ensure that you have added the CHAP to an
initiator, or on the AS, you have discovered an iSCSI target of which the CHAP authentication
is disabled.
l
If the iSCSI initiator is connected to the VIS6000 through the CHAP authentication, and
service data is being transmitted between the iSCSI initiator and the VIS6000, enabling the
CHAP authentication breaks the connection and affects the services.
Procedure
Step 1
Create a CHAP.
NOTE
l
The CHAP management function is available only when the GE service port is used on the controller.
l
If the CHAP authentication is enabled on the VIS6000, it should also be enabled on the AS connected
to the VIS6000; otherwise, you cannot set up the connection between the VIS6000 and the AS.
1.
In the navigation tree, select the VIS6000 on which a CHAP is to be created.
2.
On the menu bar, choose
Security
>
CHAP Management...
.
The
CHAP Management
dialog box is displayed, as shown in
.
OceanStor VIS6000 Series Virtual Intelligent Storage
System
Initial Configuration Guide
4 Configuring Basic Services
Issue 08 (2010-05-10)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4-55