HP 3PAR Solaris Implementation Guide

NOTE: The CHAP secret length must be between 12 and 16 characters.

The following example sets host_secret0 as the host secret key.

# sethost initchap -f host_secret0 solarisiscsi

b. Verify the host CHAP secret.

# showhost -chap

Id Name -Initiator_CHAP_Name- -Target_CHAP_Name-

1 solarisiscsi solarisiscsi -

c. Set the secret key host_secret0 on the host.

NOTE: The secret key used at the HP 3PAR StoreServ Storage should match on the host.

# iscsiadm modify initiator-node --CHAP-secret

Enable CHAP as the authentication method after the secret key is set.

# iscsiadm modify initiator-node --authentication CHAP

d. Enable CHAP as the authentication method.

# iscsiadm modify target-param --authentication CHAP

iqn.2000-05.com.3pardata:21310002ac00003

# iscsiadm modify target-param --authentication CHAP

iqn.2000-05.com.3pardata:20310002ac00003

e. Verify that the authentication is enabled.

# iscsiadm list initiator-node

Initiator node name: iqn.1986-03.com.sun:01:0003bac3b2e1.45219d0d

Initiator node alias: -

Header Digest: NONE/-

Data Digest: NONE/-

Authentication Type: CHAP

CHAP Name: iqn.1986-03.com.sun:01:0003bac3b2e1.45219d0d

- - -

# iscsiadm list target-param -v

Target: iqn.2000-05.com.3pardata:21310002ac00003e

Alias: -

Bi-directional Authentication: disabled

Authentication Type: CHAP

CHAP Name: iqn.2000-05.com.3pardata:21310002ac00003e

- - -

NOTE: In the example above, the default target CHAP Name is the target port iSCSI name

(iqn.2000-05.com.3pardata:21310002ac00003e) and host CHAP Name is the initiator

port iSCSI name (iqn.1986-03.com.sun:01:0003bac3b2e1.45219d0d).

Configuring CHAP Authentication (Optional) 21