7065Admin_iSCSI.fm
Draft Document for Review August 30, 2007 12:59 am
272
IBM System Storage DS3000: Introduction and Implementation Guide
12.1.2 Enter Mutual Authentication Permissions
With Mutual Authentication, a CHAP secret is configured that a specific initiator must use to
get access to the storage subsystem. That is also called initiator authentication. Each initiator
can have its own CHAP secret. Initiator authentication works without target authentication for
QLogic iSCSI HBAs but not vice versa.
1. On the iSCSI tab, Figure 12-1 on page 270, click Enter Mutual Authentication
Permissions.
2. Select a host port which has already been defined as in 8.2, “Configure hosts” on
page 142. On these iSCSI menus, the host ports are referred to as Initiator Labels.
Figure 12-4 on page 272 shows a selected host port Hudson-Port0. There is no CHAP
secret defined for this initiator as shown in the last column Permission Set?. Click CHAP
Secret....
Figure 12-4 Storage Manager - Enter mutual authentication permissions
3. Enter an initiator CHAP secret with at least 12 characters twice in this dialog as shown in.
Figure 12-5. Click OK.
