Step 6: Configure CHAP Authentication On The Host
Server (Optional)
If you configured CHAP authentication in “Configure CHAP Authentication on the Storage Array
(Optional)", complete the following steps. If not, skip to "Connect to the Target Storage Array From the
Host Server". Select the set of steps in one of the following sections (Windows or Linux) that corresponds
to your operating system.
Configure CHAP Authentication On The Host Server Using Windows GUI
Version
1.
Click
Start
→
Programs
→
Microsoft iSCSI Initiator
or click
Start
→
Programs
→
Administrative
Tools
→
iSCSI Initiator
.
2.
If you are not using mutual CHAP authentication, go to step 4.
3.
If you are using mutual CHAP authentication, click the
General
tab and select
Secret
. At
Enter a
secure secret
, enter the mutual CHAP secret you entered for the storage array.
4.
Click the
Discovery
tab.
5.
Under
Target Portals
, select the IP address of the iSCSI port on the storage array and click
Remove
.
The iSCSI port you configured on the storage array during target discovery is not displayed.
6.
Under
Target Portals
, click
Add
and re-enter the IP address or DNS name of the iSCSI port on the
storage array (removed above).
7.
Click
Advanced
and set the following values on the
General
tab:
• Local Adapter — Should always be set to Microsoft iSCSI Initiator.
• Source IP — The source IP address of the host you want to connect with.
• Data Digest and Header Digest — Optionally, you can specify that a digest of data or header
information be compiled during transmission to help with troubleshooting.
• CHAP logon information — Enter the target CHAP authentication user name and secret you
entered (for the host server) on the storage array.
• Perform mutual authentication — If mutual CHAP authentication is configured, select this option.
NOTE: IPSec is not supported.
If you require a discovery session failover, repeat step 5 and step 6 (in this procedure) for all iSCSI
ports on the storage array. Otherwise, single-host port configuration is sufficient.
NOTE: If the connection fails, ensure that all IP addresses are entered correctly. Mistyped IP
addresses result in connection problems.
8.
Click
OK
.
Configure CHAP Authentication On The Host Server Using Windows Server
Core Version
1.
Set the iSCSI initiator services to start automatically (if not already set):
sc \\<server_name>
config msiscsi start=auto
.
2.
Start the iSCSI service (if necessary):
sc start msiscsi
.
3.
If you are not using mutual CHAP authentication, go to step 5.
4.
Enter the mutual CHAP secret you entered for the storage array:
iscsicli CHAPSecret
<secret>
.
47