HP StorageWorks LUN Configuration and Security Manager XP user guide for the XP12000/XP10000/SVS200 (T1714-96008, June 2006)

50 Overview of LUN Manager
When the host is not configured for mutual authentication, the host connects to the array.
If the host is not configured for authentication by iSCSI targets with CHAP, the authentication fails
and the host cannot connect to the array.
Case B: If the host’s user information is registered on the iSCSI target, but authentication of the host
is disabled
The iSCSI target does not perform authentication of the host. The host connects to the array without
authentication regardless of whether or not the host is configured for authentication by iSCSI
targets with CHAP.
CAUTION: If a host uses Microsoft iSCSI Initiator and is configured for authentication by iSCSI
targets with CHAP, authentication of the host fails. To allow such a host to connect to the iSCSI
target without authentication, do not configure it for authentication by ports with CHAP.
Case C: If the host’s user information is not registered on the iSCSI target
Regardless of the setting on the host, the iSCSI target performs authentication of the host, but results
in a failure. The host cannot connect to the array.
Case D: When connecting via an iSCSI target that does not perform authentication of hosts
The host connects to the array without authentication of the host regardless of whether or not the host
is configured for authentication by iSCSI targets with CHAP.
In this case, although you do not need to register the host’s user information on the iSCSI target, you
can register the user information.
CAUTION: If a host uses Microsoft iSCSI Initiator and is configured for authentication by iSCSI
targets with CHAP, authentication of the host fails. To allow such a host to connect to the port
without authentication, do not configure it for authentication by iSCSI targets with CHAP.
NOTE: You should register the user information for all hosts to be connected to an iSCSI target that
performs authentication of hosts. To allow a specific host to connect to such an iSCSI target without
authentication, configure the iSCSI target and the host as follows:
On the iSCSI target:
Register the user information of the host you want to allow to connect without authentication, and then
disable the host’s authentication setting.
On the host:
It does not matter if you configure the host for authentication by ports with CHAP.
However, if the host uses Microsoft iSCSI Initiator, do not configure the host for authentication by ports
with CHAP.