Brocade iSCSI Gateway Service Administrator's Guide - Supporting Fabric OS v5.3.0 (53-1000440-01, June 2007)

6 iSCSI Gateway Service Administrator’s Guide

Publication Number: 53-1000440-01

Overview of iSCSI gateway service

The following figure shows a discovery domain set (DDSet 1), which contains two discovery

domains (DD1 and DD2). When DDSet 1 is active, iSCSI initiator A can access only iSCSI VT 1 and

iSCSI initiator B can access only VT 2 and VT 3.

FIGURE 7 Discovery domain set configuration example

SWITCH-TO-ISCSI INITIATOR AUTHENTICATION

Authenticate iSCSI sessions using CHAP (Challenge Handshake Authentication Protocol). The iSCSI

gateway service supports the following three strategies for CHAP authentication:

• One-way—Only the iSCSI VT authenticates the session.

• Mutual—Both the iSCSI initiator and the iSCSI VT authenticate the session

• Binding user names - Specific user names can be bound to an iSCSI VT. Only those user names

can be used for authentication during iSCSI logon.

NOTE

iSCSI gateway service does not support IPSec.

LOAD BALANCING THROUGH CONNECTION REDIRECTION

Connection redirection allows iSCSI sessions to be evenly distributed across ports on the same

blade. Before the maximum number of connections is reached for any given port, logins are

redirected to the next available port, resulting in an even distribution of sessions. This distribution

occurs only during the first login phase. Existing connections are not redistributed when iSCSI ports

change state from disabled to enabled or offline to online.

IP network

iS C S I gateway service

iS CS I v irtua l tar gets (V Ts )

iS CS I in itia to r A

iS CS I in itia to r B

VT 1

VT 2

VT 3

DD1

DD2

DDS et 1