Administrator Guide

5. Click OK.
6. Click Save all changes.
Delete an iSNS server
To delete the IP address for an iSNS server to remove the server from the conguration:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the iSCSI Discovery panel, select the server’s IP address.
4. Click Delete.
5. When prompted to conrm the decision, click Yes.
Prevent Discovery of Unauthorized Targets
By default, iSCSI initiators that use discovery try to log in to group targets protected by CHAP, even if they do not have the correct
access credentials. These attempts can result in a large number of events logged in the group and is not an ecient use of
resources.
You can prevent computers from discovering unauthorized targets by enabling the iSCSI discovery lter. If you enable the iSCSI
discovery lter, initiators discover only those targets for which they have the correct access credentials.
iSCSI Access Requirements
To access an iSCSI target (for example, a volume or snapshot), an iSCSI initiator must meet the security requirements identied in
Table 22. Access Requirements for iSCSI Targets.
Table 22. Access Requirements for iSCSI Targets
Security Condition Description
Network access To discover targets, the initiator must have network access to the group IP address.
Initiator access controls (Optional) If the initiator enabled target authentication (sometimes called mutual authentication),
the target authentication credentials in the group must match the credentials that were
congured in the initiator. These credentials apply to all group targets.
Target access controls The initiator must meet all the conditions in one access control policy for the target. (See About
Multihost Access to Targets.)
Enable the iSCSI Discovery Filter
To enable the iSCSI discovery lter:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the iSCSI Discovery panel, select Prevent unauthorized hosts from discovering targets.
Disable the iSCSI Discovery Filter
To disable the iSCSI discovery lter:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the iSCSI Discovery panel, clear Prevent unauthorized hosts from discovering targets.
About Volume-Level Security
113