Once CHAP is enabled, it is enforced for both discovery sessions and normal sessions. You can only
choose the CHAP mode:
• Single-direction—The target authenticates the identity of the initiator with the user-provided CHAP
secret. To enable single-direction CHAP, you must enable CHAP for a specific initiator record on
the MPX200 and enter a corresponding CHAP secret from the iSCSI host.
• Bi-directional—The initiator and target authenticate each other's identity by using the user-provided
CHAP secrets. To enable bi-directional CHAP for a discovery session, you must provide a CHAP
secret for the initiator and for the iSCSI port for which you are performing discovery. To enable
bi-directional CHAP for a normal session, you must provide a CHAP secret for the initiator and
for the iSCSI-presented target that you want to log in to.
• Single-direction CHAP during discovery session and during normal session
• Single-direction CHAP during discovery session and bi-directional CHAP during normal session
• Bi-directional CHAP during discovery session and single-direction CHAP during normal session
• Bi-directional CHAP during discovery session and during normal session
Enabling single-direction CHAP during discovery session and normal session
Table 10 lists the settings you use to enable single-direction CHAP during a discovery session and
normal session.
Table 10 CHAP single-direction settings
Microsoft initiator secret settingsMPX200 secret settings
Setting (example)ActionSetting (example)Source
N/AGeneral Tab SecretN/AiSCSI Port
CHAPsecret01
Add Target Portal
CHAPsecret01
Discovered iSCSI Initiator
CHAPsecret01
Log on to TargetN/AiSCSI Presented Target
NOTE:
These are examples of secret settings. Configure CHAP using settings that apply to your network
environment.
To enable CHAP for the MPX200-discovered iSCSI initiator entry:
• If the iSCSI initiator is not listed when you execute the set chap command, do one of the follow-
ing:
1. From HP Command View EVA, select Hosts, and then select the Add Host tab. Enter the IQN
string.
2. From the CLI, use the add command to add the iSCSI initiator that will perform the discovery.
• If the iSCSI initiator is listed when you execute the set chap command, then enable the CHAP
secret (for example, CHAPsecret01):
1. Select the index of the iSCSI initiator.
2. Enable CHAP by selecting 0 and then entering the CHAP secret.
To enable CHAP for the Microsoft iSCSI initiator:
1. Click Discovery.
• To discover iSCSI target portals manually:
MPX200 iSCSI configuration rules and guidelines102
To Next Page
Loading...
Need help?
General