Administrator Guide

Table Of Contents
Enable target authentication (for mutual authentication)
Modify a Local CHAP Account
To modify a local CHAP account:
1. Click GroupGroup Conguration.
2. Click the iSCSI tab.
3. In the Local CHAP Account panel, select the account name that you want to edit and click Modify. The Modify CHAP Account
dialog box opens.
4. Change the name or password or enable or disable the account, as needed.
5. Click OK.
Delete a Local CHAP Account
To delete a local CHAP account:
1. Click GroupGroup Conguration.
2. Click the iSCSI tab.
3. In the Local CHAP Account panel, select the CHAP account that you want to remove and click Delete.
4. Conrm the deletion by clicking the Yes button.
Congure CHAP for Initiator Authentication on Existing Volumes
To congure CHAP for an existing volume:
1. Click Volumes
2. Expand Volumes and then select the volume that you want to congure.
3. Click the Access tab.
4. In the Basic access points section, click New to open the New Basic Access Point dialog box.
5. In the dialog box, type a description for the volume and a CHAP account name.
Names can be up to 63 ASCII characters.
6. Select whether the access point applies to volumes and snapshots, volumes only, or snapshots only.
7. Click OK.
Congure CHAP for Initiator Authentication on New Volumes
To congure CHAP for a new volume:
1. Click Volumes.
2. In the Activities panel, click Create volume to open the Create Volume dialog box.
3. In the dialog box, type the general and space information for the volume.
4. For the iSCSI access information, select Dene one or more basic access points.
5. Click Add to open the New Basic Access Point dialog box.
6. In the dialog box, type a description for the volume and a CHAP account name.
Names can be up to 63 ASCII characters.
7. Select whether the access point applies to volumes and snapshots, volumes only, or snapshots only.
8. Click OK and nish typing the information for the volume.
Congure CHAP Accounts on a RADIUS Authentication Server
To use a CHAP account on an external RADIUS authentication server for iSCSI initiator authentication:
1. Set up the RADIUS server and CHAP accounts. (The RADIUS server must be accessible to all the group members.)
110
About Volume-Level Security