7-16 SANRAD V-Switch CLI User ManualCreating an IdentityIf you are working ina V-Switch cluster,each identity must beconfigured on both V-Switches.If you are workingwith an iSNS server,all hosts are able tosee the target butonly those hosts withaccess rights areable to connect to thetarget.If you want to limit host, meaning iSCSI initiator, access to targets, youmust create an identity that is more discriminate than the default identity.Use the CLI command acl identity create to name and describe anidentity.When creating identities, keep in mind that: Each identity can contain one or more iSCSI initiators. Each identity can be assigned one or both login authenticationmethods. Each identity can be attached to more than one target. Each target is first automatically coupled to a default read-writeun-authenticated access identity. Each target can have more than one identity.acl identity createYou need to define two parameters to create an identity:SWITCH PARAMETER D EFINITION STATUS E XAMPLE-alias ALIAS ALIAS FORI DENTITYMANDATORY accounting-info INFORMATION INFORMATION ONI DENTITYOPTIONAL accountantsallowed read-write accessto accountingrecordsExampleAn identity, accounting, is created for those accountants allowed read-writeaccess to the accounting records, as shown in Figure 7-11.acl identity create – alias accounting – info accountantsallowed read-write access to accounting records
