SVS200 LUN Manager and Volume Manager (T1714-96015, October 2007)

requires authentication of the host, authentication is performed for the host. When the host is successfully

authenticated, processing goes to the next phase.

After authentication of the host succeeds, if the host requires user authentication for the host group

that is connection target, the authentication of host groups phase starts. In this way, host groups and

hosts authenticate with each other, that is, mutual authentication. In the authentication of host groups

phase. if the host does not require user authentication for the host group, the host connects to the array

without authentication of the host group.

The following explains the settings required for user authentication. The settings for authentication of host

groups are needed only when performing mutual authentication.

• Settings for authentication of hosts

•Onthearray:

Use LUN Manager to specify whether authentication of hosts on each host group is performed.

On a host group that performs authentication, register user information (group name, user name,

and secret) of hosts allowed to connect to the host group. A secret isapasswordusedinCHAP

authentication. When registering user information, you can also enable or disable authentication

on a host basis. For more information, see Enabling and disabling authentication of hosts in host

groups and Registering a host's user information on a host group.

•Onhosts:

Conﬁgure the operating system and Fibre Channel host bus adapter driver for authentication by

host groups with CHAP. You must specify the host's user name and secret used for CHAP. For

more information, see the documentation for the operating system and Fibre Channel host bus

adapterdriverinyourenvironment.

• Settings for authentication of ports (required if performing mutual authentication)

•Onthearray:

Use LUN Manager to specify each host group's user information (user name and secret). For

more information, see Specifying a host group's user information (when performing mutual

authentication).

•Onhosts:

Conﬁgure the operating system and Fibre Channel host bus adapter driver for authenticating

host groups with CHAP. You must specify the user name and secret of the host group that is the

connection target. For more information, see the documentation for the operating system and Fibre

Channel host bus adapter driver in your environment.

The next section explains authentication of hosts and host groups.

Authentication of hosts (Fibre Channel environments)

When

a host attempts to connect to the array, the connection results of the authentication of the host

differs depending on the host group settings. Figure 9 illustrates the relationship between host group

settings and the connection results.

Overview of LUN Manager