User`s guide

Chapter VII. iSCSI PDU Offload Target
Chelsio T5/T4 Unified Wire For Linux Page 125
ACL=iname=iqn.2006-02.com.chelsio.san1
# any initiator from IP address 102.50.50.101 is allowed full
# read-write access of this target
ACL=sip=102.50.50.101
# any initiator connected via the target portal 102.60.60.25
# is allowed full read-write access to this target
ACL=dip=102.60.60.25
# initiator “iqn.2005-09.com.chelsio.san2” from 102.50.50.22
# and connected via the target portal 102.50.50.25 is allowed
# read only access of this target
ACL=iname=iqn.2006-
02.com.chelsio.san2;sip=102.50.50.22;dip=102.50.50.25;lun=ALL:R
4.6.1. ACL Enforcement
To toggle ACL enforcement on a per-target base, a Chelsio keyword ACL_Enable is provided:
Setting ACL_Enable=Yes enables the target to perform initiator authorization checking for all
the initiators during login phase. And in addition, once the initiator has been authorized to
access the target, the access rights will be checked for each individual LU the initiator trying
to access.
Setting ACL_Enable=No disable the target to perform initiator authorization checking.
When a target device is marked as read-only (RO), it takes precedence over ACL’s write
permission (i.e., all of ACL write permission of an initiator is ignored).
4.7. Target Storage Device Configuration
An iSCSI Target can support one or more storage devices. The storage device can either be the
built-in RAM disk or actual backend storage.
Configuration of the storage is done through the Chelsio configuration file via the key-value pair
TargetDevice.
When option NULLRW is specified, on writes the data is dropped without being copied to the
storage device, and on reads the data is not actually read from the storage device but instead
random data is used. This option is usefuly for measuring network performance.