HP StorageWorks SR2122, Руководство пользователя

Страница: 146 / 242

Configuring Authentication
146 IP Storage Router SR2122-2 User Guide
Prerequisite Tasks
Before performing AAA and iSCSI authentication configuration tasks on the
storage router, make sure you have configured system parameters as described in
Chapter 5, “Configuring the Storage Router” and Chapter 6, “Configuring System
Parameters” If the storage router is deployed for SCSI routing, you should also
configure SCSI routing instances as described in Chapter 8, “Configuring SCSI
Routing” before proceeding.
Note: AAA and iSCSI authentication configuration settings are system-wide
parameters and are not shared across a cluster. However, you may prefer to configure
all storage routers in a cluster with the same authentication settings.
Using iSCSI Authentication
iSCSI authentication provides a mechanism to authenticate all IP hosts that
request access to storage via a SCSI routing instance. When enabled, iSCSI
drivers provide user name and password information each time an iSCSI TCP
connection is established. iSCSI authentication uses the iSCSI CHAP (Challenge
Handshake Authentication Protocol) authentication method. Authentication
services are provided by the AAA subsystem configured for each storage router.
Authentication, authorization and accounting (AAA) is an architectural
framework for configuring a set of three independent security functions in a
consistent, modular manner. The storage router implements the authentication
function.
Authentication provides a method of identifying users (including login and
password dialog, challenge and response, and messaging support) prior to
receiving access to the requested object, function, or network service. AAA
authentication is configured by defining a list of authentication services. iSCSI
authentication, which uses the AAA authentication services list, can be enabled
for specific SCSI routing instances.
AAA Security Services
iSCSI authentication uses AAA security services to administer its security
functions. If you are using remote security servers, AAA is the means through
which you establish communications between the storage router and the remote
RADIUS or security server.