Chelsio Communications Chelsio T4 Betriebsanweisung PDF herunterladen (Seite 116)

Chapter VII. iSCSI PDU Offload Target

4.5.1. Oneway CHAP authentication

With Oneway CHAP (also called unidirectional CHAP) the target uses CHAP to authenticate the

initiator. The initiator does not authenticate the target. This method is the default method.

For Oneway CHAP, the initiator CHAP id and secret are configured and stored on a per-initiator



4.5.2. Mutual CHAP authentication

With mutual CHAP (also called bidirectional CHAP), the target uses CHAP to authenticate the

initiator. The initiator uses CHAP to authenticate the target.

For mutual CHAP, in addition to the initiator CHAP id and secret, the target CHAP id and secret

are required. They are configured and stored on a per target basis with Chelsio Entity parameter



4.5.3. Adding CHAP User ID and Secret

A single Auth_CHAP_Target key and multiple Auth_CHAP_Initiator keys could be configured

per target:

target:

TargetName=iqn.2006-02.com.chelsio.diskarray.san1

TargetDevice=/dev/sda [email protected]:8000

Auth_CHAP_Policy=Oneway

Auth_CHAP_Initiator=“remoteuser1”:“remoteuser1_secret”

Auth_CHAP_Initiator=“remoteuser2”:“remoteuser2_secret”

Auth_CHAP_Target=“targetid1”:“target1_secret”

iqn.2005-com.chelsio.diskarray.san1

to authenticate two initiators, and its own id and secret are configured for use in the case of

mutual CHAP.

4.5.4. AuthMethod and Auth_CHAP_Policy Keys

By setting the iSCSI key AuthMethod and the key Auth_CHAP_Policy, a user can choose

whether to enforce CHAP and if Mutual CHAP needs to be performed.

The AuthMethod key controls if an initiator needs to be authenticated or not. The default setting

of AuthMet

The Auth_CHAP_Policy key controls which CHAP authentication (Oneway or mutual) needs to



On an iSCSI node, with AuthMethod=None,CHAP:

Auth_CHAP_Policy=Oneway, Chelsio iSCSI target will accept a relevant initiator if it does

1 2 ... 111 112 113 114 115 116 117 118 119 120 121 ... 373 374

Keine Kommentare

Chelsio Communications Chelsio T4 Betriebsanweisung Seite 116