Snap Server 700i Series User’s Guide 77Chapter 7Controlling Access to Your IP SANThis chapter describes how to use Adaptec Storage Manager to restrict and controlaccess to your IP SAN and iSCSI targets (logical devices) with auto-discoverycontrol lists, authentication, and the Security Manager.Limiting Discovery of iSCSI Targets with Auto-discoveryControl ListsIf you want to limit which iSCSI initiators can discover an iSCSI target (logicaldevice), you can create an auto-discovery control list which will allow one or morespecified iSCSI initiators to discover an iSCSI target while preventing other iSCSIinitiators from discovering it, as illustrated in this figure.Each iSCSI target can have its own auto-discovery control list, with specified iSCSIinitiators that are permitted to discover it.Note Auto-discovery control lists don’t prevent iSCSI initiators from logging intoiSCSI targets that aren’t on their control lists. If you are using iSNS to discover iSCSItargets and want to control which logical devices are logged into by which iSCSIinitiators, you must set CHAP authentication. Without CHAP authentication, alliSCSI initiators will be able to log in to all iSCSI targets. See “Controlling Access toYour IP SAN with Authentication” on page 79 for more information.iSCSIAuto-discovery controllist denies discovery toInitiator BAuto-discovery control listallows Initiator A todiscover targetiSCSI Initiator A iSCSI Initiator BiSCSI Target
