Administrator Guide

8 In the Public Networks/Initiators area, dene an iSCSI initiator IP address or subnet that requires port forwarding to reach the
Storage Center because it is separated from the Storage Center by a router performing NAT.
a Click Add.
The Create iSCSI NAT Public Network/Initiator dialog box opens.
b In the Public IPv4 Address eld, type the IPv4 address for the iSCSI initiator or subnet for which NAT port forwarding is
required.
c In the Subnet Mask eld, type the subnet mask for the iSCSI initiator IP address or subnet.
d Click OK.
The Create iSCSI NAT Public Network/Initiator dialog box closes.
9 Repeat the preceding steps for each additional iSCSI initiator IP address or subnet that requires port forwarding.
10 Click OK.
Modify NAT Port Forwarding for an iSCSI Fault Domain
Modify NAT port forwarding to change the port forwarding conguration or change the iSCSI initiators and subnets that require port
forwarding.
Prerequisites
• The Storage Center iSCSI ports must be congured for virtual port mode.
• For each Storage Center iSCSI control port and virtual port, a unique public IP address and TCP port pair must be reserved on the
router that performs NAT.
Steps
1 If you are connected to a Data Collector, select a Storage Center from the drop-down list in the left navigation pane.
2 From the SYSTEM menu, select Ports.
The Ports view is displayed.
3 Click the Front End Ports tab.
4 Expand iSCSI and click the fault domain link.
The Fault Domain view is displayed.
5 On the Summary tab, click (More Actions) and select Congure NAT Port Forwarding.
The Congure NAT Port Forwarding dialog box opens.
6 In the Port Forwarding Conguration area, modify port forwarding information for a Storage Center iSCSI port.
• To add port forwarding information for an iSCSI port, click Add.
• To modify port forwarding information for an iSCSI port, select the port, then click Edit.
• To delete port forwarding information for an iSCSI port, select the port, then click Remove.
7 In the Public Networks/Initiators area, add or modify iSCSI initiator IP addresses or subnets that require port forwarding to reach the
Storage Center because it is separated from the Storage Center by a router performing NAT.
• To add an iSCSI initiator IP address or subnet, click Add.
• To modify an iSCSI initiator IP address or subnet, select it, then click Edit.
• To delete an iSCSI initiator IP address or subnet, select it, then click Remove.
8 Click OK.
Conguring CHAP for iSCSI Fault Domains
When Challenge Handshake Authentication Protocol (CHAP) authentication is enabled, the Storage Center challenges each iSCSI initiator
in the fault domain for a shared secret (password). When CHAP is enabled it applies to all servers and remote Storage Centers that
connect to the fault domain.
NOTE
: When CHAP is enabled for an iSCSI fault domain, all iSCSI initiators in the fault domain (servers and Storage Centers)
must be congured to use CHAP. All iSCSI initiators that are not congured to use CHAP are no longer able to communicate with
the Storage Center iSCSI ports in the fault domain.
150 Storage Center Maintenance