Administrator Guide

Table Of Contents
Control Access to iSCSI Initiators – To protect your volumes from unauthorized and uncoordinated access by iSCSI initiators, you
can use access control policies.
Control Access to Hosts (servers) – To prevent inadvertent corruption of the volume caused by multiple hosts writing to it in an
uncoordinated manner, enable multihost access to a volume.
Access Control List Panel
The Access Control List panel displays which access policies are assigned to the selected volume. The panel is divided into three
distinct subpanels for managing access policy groups, access policies, and basic access points. These subpanels do not appear until a
basic access point, access policy, or access policy group is added.
CAUTION: Do not add or modify access policies on NAS ACL volumes. Data loss could result.
Table 72. Access Control List Panel
Attribute Description
Access Policy Groups
Access policy groups panel Displays all access control policy groups in use on this volume.
The “+” sign next to an access policy group name expands the view to include the access
policies and access points that make up the group.
Add Associates a new access policy group
Modify Opens the currently selected group for editing
Remove Removes the currently selected access policy group. Removal does not delete the access
policy group; it only disassociates it from the active volume.
Access Policies
Access policies panel Displays all access control policies in use on this volume.
The "+” sign next to a policy name expands the view to include extended access points
that make up the group.
Add Associates a new access policy
Modify Opens the currently selected policy for editing.
Remove Removes the currently selected policy. Removal does not delete the policy; it only
disassociates it from the volume.
Basic Access Points
Basic access points panel Displays all basic access points in use on this volume
New Creates a new basic access point
Modify Opens the currently selected access point for editing
Delete Permanently deletes the currently selected access point
Columns
Policy Name of the policy or policy group. You can expand the policies here to reveal any attached
CHAP accounts to the policy.
CHAP Account Name of the CHAP account dened in the access point, if applicable. Requires that access
policies be expanded so that access points are shown.
iSCSI Initiator iSCSI initiator used by the access point, if applicable. Requires that access policies be
expanded so that access points are shown.
368
Reference: GUI Panels, Wizards, and Dialog Boxes