HP-UX iSCSI Software Initiator Support Guide (Edition 7)

<radius-server-hostname> is the IP address or hostname of the RADIUS server.
(3) Configure for the Bi-directional authentication method as follows:
# iscsiutil -u -H <chap-authentication-type> [-T <target-name>] [-I <ip-address>] [-P <tcp-port>] [-M
<portal-grp-tag>]
To configure Bi-directional authentication on a global basis:
# iscsiutil -u -H CHAP_BI
To configure Bi-directional authentication for a particular Discovery Target Address:
# iscsiutil -u -H CHAP_BI -I 192.1.1.10 -M 3
To configure Bi-directional authentication for a particular Operational Target:
# iscsiutil -u -H CHAP_BI -T iqn.2003-11.com.hp.stor:iSCSI
To configure Bi-directional authentication for a particular Operational Target Address:
# iscsiutil -u -H CHAP_BI -T iqn.200-1.com.hp.stor:iSCSI -I 192.1.1.1 -P 5000 -M 1
(4) Verification of the configured parameters:
NOTE: CHAP Method is only valid if Authentication Method is set. The values displayed
by the verification commands for the Authentication Method parameters are the values
proposed by the iSCSI Software Initiator to the iSCSI target, in order of preference. The target
MUST respond with the first value that it supports.
To display authentication parameters common to all targets:
# iscsiutil -l
To display authentication parameters for all Discovery Targets:
# iscsiutil -pD
To display authentication parameters for all Operational Targets:
# iscsiutil -pO
To display authentication parameters for all Sessions:
# iscsiutil -pS
To display authentication parameters for a particular Operational Target identified by its Target
Name:
# iscsiutil -p -T <target-name>
NOTE: If authentication parameters are configured on a per target basis, the parameters displayed
by "iscsiutil -l" are overridden by the parameters displayed by the other display commands.
Among the various authentication parameters displayed by the verification commands described
above, the parameters of interest for the "Bi-directional" CHAP method are:
• Authentication Method
• CHAP Method
• Initiator CHAP Name
• CHAP Secret
• NAS Hostname
• NAS Secret
• RADIUS Server Hostname
4.2.3 Starting the iradd (iSCSI CHAP) Daemon
NOTE: The Bi-directional CHAP method requires the use of the iradd daemon (iSCSI CHAP
daemon). The Uni-directional CHAP method does not require the use of the iradd daemon (iSCSI
CHAP daemon).
4.2 Challenge-Handshake Authentication Protocol (CHAP) Configuration 25