McDATA Eclipse 2640 SAN, Administration And Configuration Manual

Page: 134 / 276

5
5-26
Eclipse™ 2640 SAN Router Administration and Configuration Manual
Configuring iSCSI Authentication
Figure 5-13
Sample Authentication Configuration
A typical interaction would be as follows:
1. The iSCSI initiator creates a “portal” session with the SAN
Router.
2. The iSCSI initiator is configured to use CHAP authentication. The
password and username have been configured in the iSCSI
initiator.
3. The iSCSI initiator does not communicate with the RADIUS
server directly. The SAN Router acts as a mediator between the
iSCSI initiator and RADIUS server.
4. If the RADIUS server grants permission to the iSCSI port request,
then the SAN Router will grant access to “zoned” FC targets to
the iSCSI initiator.
The external RADIUS server can be anywhere on the network, as
long as it is reachable from the out-of-band management port, or the
iSCSI port used to reach the iSCSI initiator.