HP Storageworks 8100 - enterprise virtual array, Руководство пользователя

Страница: 102 / 408

Once CHAP is enabled, it is enforced for both discovery sessions and normal sessions. You can only
choose the CHAP mode:
• Single-direction —The target authenticates the identity of the initiator with the user-provided CHAP
secret. To enable single-direction CHAP, you must enable CHAP for a specific initiator record on
the MPX200 and enter a corresponding CHAP secret from the iSCSI host.
• Bi-directional —The initiator and target authenticate each other's identity by using the user-provided
CHAP secrets. To enable bi-directional CHAP for a discovery session, you must provide a CHAP
secret for the initiator and for the iSCSI port for which you are performing discovery. To enable
bi-directional CHAP for a normal session, you must provide a CHAP secret for the initiator and
for the iSCSI-presented target that you want to log in to.
• Single-direction CHAP during discovery session and during normal session
• Single-direction CHAP during discovery session and bi-directional CHAP during normal session
• Bi-directional CHAP during discovery session and single-direction CHAP during normal session
• Bi-directional CHAP during discovery session and during normal session
Enabling single-direction CHAP during discovery session and normal session
Table 10 lists the settings you use to enable single-direction CHAP during a discovery session and
normal session.
Table 10 CHAP single-direction settings
Microsoft initiator secret settings MPX200 secret settings
Setting (example) Action Setting (example) Source
N/A General Tab Secret N/A iSCSI Port
CHAPsecret01
Add Target Portal
CHAPsecret01
Discovered iSCSI Initiator
CHAPsecret01
Log on to Target N/A iSCSI Presented Target
NOTE:
These are examples of secret settings. Configure CHAP using settings that apply to your network
environment.
To enable CHAP for the MPX200-discovered iSCSI initiator entry:
• If the iSCSI initiator is not listed when you execute the
set chap
command, do one of the follow-
ing:
1. From HP Command View EVA, select Hosts , and then select the Add Host tab. Enter the IQN
string.
2. From the CLI, use the
add
command to add the iSCSI initiator that will perform the discovery.
• If the iSCSI initiator is listed when you execute the
set chap
command, then enable the CHAP
secret (for example, CHAPsecret01):
1. Select the index of the iSCSI initiator.
2. Enable CHAP by selecting 0 and then entering the CHAP secret.
To enable CHAP for the Microsoft iSCSI initiator:
1. Click Discovery .
• To discover iSCSI target portals manually:
MPX200 iSCSI configuration rules and guidelines 102