Administrator Guide

– CHAP user name
– Password (otherwise known as a CHAP secret). For optimal security, passwords must contain at least 12 characters
(preferably random). Individual iSCSI initiators have their own rules and restrictions for length and format. Consult your
initiator documentation for details.
To create a local CHAP account:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. (Optional) Select Enable local authentication and check local rst in the iSCSI Authentication panel.
4. In the Local CHAP Accounts panel, click Add to open the Add CHAP Account dialog box.
5. Type a CHAP user name and, optionally, a password.
• The user name can be up to 63 printable characters (any characters except space and colon).
NOTE: If the user name contains a pound-sign character, enclose the name in quotation marks (for example,
“chap#user”). Otherwise, the system will read the characters after the pound sign as a comment and not
include them in the user name.
• The password can be up to 255 printable characters (any characters except space and colon). If you do not enter a
password, the group automatically generates a password that is 16 characters long).
6. Select whether to enable the account. You must enable an account to use it for initiator authentication. You can modify an
account and enable or disable it later.
7. Click OK.
8. Click Save all changes.
NOTE: In the iSCSI initiator authentication area, you can select Enable RADIUS authentication for iSCSI initiators,
Consult locally dened CHAP accounts rst, or both. Make sure that at least one of these choices is selected. If
neither option is selected, the PS Series group will lock out all iSCSI initiator logins.
After creating the CHAP account, you can:
• Create an access control policy and use the CHAP user name in the policy
• Enable target authentication (for mutual authentication)
Modify a Local CHAP Account
To modify a local CHAP account:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the Local CHAP Account panel, select the account name that you want to edit and click Modify. The Modify CHAP Account
dialog box opens.
4. Change the name or password or enable or disable the account, as needed.
5. Click OK.
Delete a Local CHAP Account
To delete a local CHAP account:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the Local CHAP Account panel, select the CHAP account that you want to remove and click Delete.
4. Conrm the deletion by clicking the Yes button.
118
About Volume-Level Security