Dell PowerVault MD3260i Deployment Manual

Also see for PowerVault MD3260i Series: Manual Installation and configuration guide Hardware and software guide Installation guide Getting started guide

Contents

Dell PowerVault MD3260i Deployment Manual Manual pdf 38 page image

Target CHAPIn target CHAP, the storage array authenticates all requests for access issued by the iSCSI initiator(s) on the host serverusing a CHAP secret. To set up target CHAP authentication, you must enter a CHAP secret on the storage array, thenconfigure each iSCSI initiator on the host server to send that secret each time it attempts to access the storage array.Mutual CHAPIn addition to setting up target CHAP, you can set up mutual CHAP in which both the storage array and the iSCSI initiatorauthenticate each other. To set up mutual CHAP, configure the iSCSI initiator with a CHAP secret that the storage arraymust send to the host sever in order to establish a connection. In this two-way authentication process, both the hostserver and the storage array send information that the other must validate before a connection is allowed.CHAP is an optional feature and is not required to use iSCSI. However, if you do not configure CHAP authentication, anyhost server connected to the same IP network as the storage array can read from and write to the storage array.NOTE: When using CHAP authentication, you should configure it on both the storage array (using MD StorageManager) and the host server (using the iSCSI initiator) before preparing virtual disks to receive data. If youprepare disks to receive data before you configure CHAP authentication, you lose visibility to the disks once CHAPis configured.CHAP DefinitionsTo summarize the differences between target CHAP and mutual CHAP authentication, see the following table.CHAP Type DescriptionTarget CHAP Sets up accounts that iSCSI initiators use to connect tothe target storage array. The target storage array thenauthenticates the iSCSI initiator.Mutual CHAP Applied in addition to target CHAP, mutual CHAP sets upan account that a target storage array uses to connect toan iSCSI initiator. The iSCSI initiator then authenticatesthe target.Step 5: Configure CHAP Authentication On The Storage Array(Optional)If you are not configuring any type of CHAP, skip these steps and go to Step 7: Connect To The Target Storage ArrayFrom The Host Server.NOTE: If you choose to configure mutual CHAP authentication, you must first configure target CHAP.In terms of iSCSI configuration, the term Target always refers to the storage array.Configuring Target CHAP Authentication On The Storage Array1. From MD Storage Manager, click the iSCSI tab and then click Change Target Authentication.Select one of the CHAP settings described in the following table.38