Administrator Guide

With target authentication, when the initiator tries to connect to a target, the target supplies a user name and password to the
initiator. The initiator compares the user name and password to mutual authentication credentials that you congure in the initiator
conguration interface. The iSCSI connection succeeds only if the information matches.
A group automatically enables target authentication using a default user name and password, which you can change. Whether the
initiator requires target authentication depends on the initiator conguration settings.
To display the current target authentication user name and password:
1. Click Group → Group Conguration.
2. Click the iSCSI tab.
3. In the iSCSI Authentication panel, click Modify. The Modify Target CHAP Account dialog box opens.
4. In the dialog box, type the target authentication user name and password.
5. Click OK to save the changes.
About iSNS Servers
In a shared storage environment, you must control computer access to iSCSI targets (volumes and snapshots), because multiple
computers writing to a target in an uncoordinated manner might result in volume corruption.
When an initiator tries to log in to a target, the group uses access control policies to determine if access should be authorized.
However, access control policies do not prevent multiple initiators, either on the same computer or dierent computers, from
accessing the same target.
Therefore, by default, the group disables multihost (shared) access to a target. Only one iSCSI qualied name (IQN) can connect to
a target at one time.
If all group members are not running PS Series rmware version 6.0 or later, the group allows multihost access to targets.
An iSNS (Internet Storage Name Service) server can facilitate iSCSI initiator discovery of iSCSI targets in a SAN.
Prerequisites for Conguring an iSNS Server
The following considerations might apply when conguring an iSNS server:
• By default, the group disables target discovery by iSNS servers. If you want iSNS servers to discover a target, you must enable
this functionality on the target. Set up the iSNS server and congure the iSCSI initiator to use the iSNS server for discovery. See
your iSNS server and iSCSI initiator documentation for details.
• The iSNS server must be accessible to all the group members.
• A group disables automatic discovery of group targets by iSNS servers only if all the group members are running PS Series
rmware version 6.0 or later. If a member is running an earlier rmware version, iSNS servers can automatically discover all group
targets.
• You can specify up to three IP addresses. The group uses only one iSNS server at a time. The rst server listed is the default
server. If the default server is not available, the group uses the other servers in the order in which they were specied. Click the
Up and Down arrows to change the IP address order.
• If you are using a port number other than the default of 3205, you need an IP address for each iSNS server in the format
nnn.nnn.nnn.nnn:port.
Enable or Disable iSNS Discovery
You can congure a PS Series group to use an iSNS (Internet Storage Name Service) server, which facilitates the discovery of iSCSI
targets in the group.
By default, the group disables automatic discovery of targets by iSNS servers. If you want an iSNS server to automatically discover a
group target, you must enable this functionality on the target.
120
About Volume-Level Security