HP-UX iSCSI Software Initiator Support Guide, HP-UX 11i v1 and 11i v2, July 2005

Chapter 4

Configuration

Challenge-Handshake Authentication Protocol (CHAP) Configuration

# iscsiutil -u -H CHAP_BI

To configure Bi-directional authentication for a particular Discovery Target Address:

# iscsiutil -u -H CHAP_BI -I 192.1.1.10 -M 3

To configure Bi-directional authentication for a particular Operational Target:

# iscsiutil -u -H CHAP_BI -T iqn.2003-11.com.hp.stor:iSCSI

To configure Bi-directional authentication for a particular Operational Target Address:

# iscsiutil -u -H CHAP_BI -T iqn.200-1.com.hp.stor:iSCSI -I 192.1.1.1 -P 5000 -M 1

(4) Verification of the configured parameters:

NOTE CHAP Method is only valid if Authentication Method is set. The values displayed by the

verification commands for the Authentication Method parameters are the values proposed by

the iSCSI Software Initiator to the iSCSI target, in order of preference. The target MUST

respond with the first value that it supports.

To display authentication parameters common to all targets:

# iscsiutil -l

To display authentication parameters for all Discovery Targets:

# iscsiutil -pD

To display authentication parameters for all Operational Targets:

# iscsiutil -pO

To display authentication parameters for all Sessions:

# iscsiutil -pS

To display authentication parameters for a particular Operational Target identified by its Target Name:

# iscsiutil -p -T <target-name>

NOTE If authentication parameters are configured on a per target basis, the parameters displayed by

"iscsiutil -l" are overridden by the parameters displayed by the other display commands.

Among the various authentication parameters displayed by the verification commands described above, the

parameters of interest for the "Bi-directional" CHAP method are:

• Authentication Method

• CHAP Method

• Initiator CHAP Name

• CHAP Secret

• NAS Hostname

• NAS Secret

• RADIUS Server Hostname