User Manual

4. Click OK.
Table 6. CHAP Setting
Option Description
None This is the default selection. If None is the only
selection, the storage array allows an iSCSI
initiator to log on without supplying any type of
CHAP authentication.
None and CHAP The storage array allows an iSCSI initiator to log
on with or without CHAP authentication.
CHAP If CHAP is selected and None is deselected, the
storage array requires CHAP authentication
before allowing access.
Configuring Mutual CHAP Authentication On The Storage Array
The initiator secret must be unique for each host server that connects to the storage array and must not
be the same as the target CHAP secret.
Change the initiator authentication settings in the Change Target Authentication window. Use these
options to change the settings:
• None—Select None if you permit no initiator authentication. If you select None, any initiator can
access this target. Use this option only if you do not require secure data. However, you can select
both None and CHAP at the same time.
• CHAP—Select CHAP if you want to enable an initiator that tries to access the target to authenticate
using CHAP. Define the CHAP secret only if you want to use mutual CHAP authentication. If you
select CHAP, and if no CHAP target secret is defined, an error message is displayed. Click CHAP
Secret to view the Enter CHAP Secret windows. Use this window to define the CHAP secrets.
NOTE: To remove a CHAP secret, you must delete the host initiator and re-add it.
Step 6: Configure CHAP Authentication On The Host
Server (Optional)
If you configured CHAP authentication in “Configure CHAP Authentication on the Storage Array
(Optional)", complete the following steps. If not, skip to "Connect to the Target Storage Array From the
Host Server". Select the set of steps in one of the following sections (Windows or Linux) that corresponds
to your operating system.
Configure CHAP Authentication On The Host Server Using Windows GUI
Version
1. Click Start → Programs → Microsoft iSCSI Initiator or click Start → Programs → Administrative
Tools → iSCSI Initiator.
2. If you are not using mutual CHAP authentication, go to step 4.
3. If you are using mutual CHAP authentication, click the General tab and select Secret. At Enter a
secure secret, enter the mutual CHAP secret you entered for the storage array.
4. Click the Discovery tab.
5. Under Target Portals, select the IP address of the iSCSI port on the storage array and click Remove.
The iSCSI port you configured on the storage array during target discovery is not displayed.
49