Administrator Guide

e. Click OK. The Create iSCSI NAT Port Forward dialog box closes.
6. Repeat the preceding steps for each additional iSCSI control port and physical port in the fault domain.
7. In the Public Networks/Initiators area, dene an iSCSI initiator IP address or subnet that requires port forwarding to reach the
Storage Center because it is separated from the Storage Center by a router performing NAT.
a. Click Add. The Create iSCSI NAT Initiator Conguration dialog box opens.
b. In the Public IPv4 Address eld, type the IPv4 address for the iSCSI initiator or subnet for which NAT port forwarding is
required.
c. In the Subnet Mask eld, type the subnet mask for the iSCSI initiator IP address or subnet.
8. Repeat the preceding steps for each additional iSCSI initiator IP address or subnet that requires port forwarding.
9. Click OK. The Congure NAT Port Forwarding dialog box closes.
Modify NAT Port Forwarding for an iSCSI Fault Domain
Modify NAT port forwarding to change the port forwarding conguration or change the iSCSI initiators and subnets that require port
forwarding.
Prerequisites
• The Storage Center iSCSI ports must be congured for virtual port mode.
• For each Storage Center iSCSI control port and virtual port, a unique public IP address and TCP port pair must be reserved on
the router that performs NAT.
Steps
1. Select a Storage Center from the Storage view. (Data Collector connected Storage Manager Client only)
2. Click the Storage tab.
3. In the Storage tab navigation pane, expand Fault Domains → iSCSI, then select the fault domain.
4. In the right pane, click Congure NAT Port Forwarding. The Congure NAT Port Forwarding dialog box opens.
5. In the Port Forwarding Conguration area, modify port forwarding information for a Storage Center iSCSI port.
• To add port forwarding information for an iSCSI port, click Add.
• To modify port forwarding information for an iSCSI port, select the port, then click Edit.
• To delete port forwarding information for an iSCSI port, select the port, then click Remove.
6. In the Public Networks/Initiators area, add or modify iSCSI initiator IP addresses or subnets that require port forwarding to
reach the Storage Center because it is separated from the Storage Center by a router performing NAT.
• To add an iSCSI initiator IP address or subnet, click Add.
• To modify an iSCSI initiator IP address or subnet, select it, then click Edit.
• To delete an iSCSI initiator IP address or subnet, select it, then click Remove.
7. Click OK. The Congure NAT Port Forwarding dialog box closes.
Conguring CHAP for iSCSI Fault Domains
When Challenge Handshake Authentication Protocol (CHAP) authentication is enabled, the Storage Center challenges each iSCSI
initiator in the fault domain for a shared secret (password). When CHAP is enabled it applies to all servers and remote
Storage
Centers that connect to the fault domain.
NOTE: When CHAP is enabled for an iSCSI fault domain, all iSCSI initiators in the fault domain (servers and Storage
Centers) must be congured to use CHAP. All iSCSI initiators that are not congured to use CHAP are no longer able to
communicate with the Storage Center iSCSI ports in the fault domain.
Congure CHAP for Servers in an iSCSI Fault Domain
When Challenge Handshake Authentication Protocol (CHAP) authentication is enabled, the Storage Center challenges each iSCSI
initiator for a shared secret (password). Servers must provide the correct shared secret to access
Storage Center volumes.
1. Select a Storage Center from the Storage view. (Data Collector connected Storage Manager Client only)
2. Click the Storage tab.
3. In the Storage tab navigation pane, expand Fault Domains → iSCSI, then select the fault domain.
4. In the right pane, click Congure CHAP. The Congure CHAP dialog box opens.
Storage Center Maintenance
279