•
CHAP
— Select
CHAP
if you want to enable an initiator that tries to access the target to authenticate
using CHAP. Define the CHAP secret only if you want to use mutual CHAP authentication. If you
select
CHAP
, and if no CHAP target secret is defined, an error message is displayed. Click
CHAP
Secret
to view the
Enter CHAP Secret
windows. Use this window to define the CHAP secrets.
NOTE: To remove a CHAP secret, you must delete the host initiator and add it again.
Step 6: Configure CHAP Authentication On The Host
Server (Optional)
If you configured CHAP authentication in
Step 5 Configure CHAP Authentication on the Storage Array
(Optional)
, complete the following steps. If not, skip to
Step 7 Connect to the Target Storage Array From
the Host Server
.
Select the set of steps in one of the following sections (Windows or Linux) that corresponds to your
operating system.
Configure CHAP Authentication On The Host Server Using Windows GUI
Version
1.
Click
Start
→
Programs
→
Microsoft iSCSI Initiator
or click
Start
→
Programs
→
Administrative
Tools
→
iSCSI Initiator
.
2.
If you are not using mutual CHAP authentication, go to step 4.
3.
If you are using mutual CHAP authentication, click the
General
tab and select
Secret
. At
Enter a
secure secret
, enter the mutual CHAP secret you entered for the storage array.
4.
Click the
Discovery
tab.
5.
Under
Target Portals
, select the IP address of the iSCSI port on the storage array and click
Remove
.
The iSCSI port you configured on the storage array during target discovery is not displayed.
6.
Under
Target Portals
, click
Add
and re-enter the IP address or DNS name of the iSCSI port on the
storage array (removed above).
7.
Click
Advanced
and set the following values on the
General
tab:
• Local Adapter — Should always be set to Microsoft iSCSI Initiator.
• Source IP — The source IP address of the host you want to connect with.
• Data Digest and Header Digest — Optionally, you can specify that a digest of data or header
information be compiled during transmission to help with troubleshooting.
• CHAP logon information — Enter the target CHAP authentication user name and secret you
entered (for the host server) on the storage array.
• Perform mutual authentication — If mutual CHAP authentication is configured, select this option.
NOTE: IPSec is not supported.
If you require a discovery session failover, repeat step 5 and step 6 (in this procedure) for all iSCSI
ports on the storage array. Otherwise, single-host port configuration is sufficient.
NOTE: If the connection fails, ensure that all IP addresses are entered correctly. Mistyped IP
addresses result in connection problems.
8.
Click
OK
.
41