Cisco Systems MDS 9000 Video Gaming Accessories User Manual


 
Send documentation comments to mdsfeedback-doc@cisco.com.
20-19
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-6965-03, Cisco MDS SAN-OS Release 2.x
Chapter 20 iSCSI Configuration
Configuring iSCSI
Step 3 Click Apply to save these changes or click Close to discard any unsaved changes.
Mutual CHAP Authentication
In addition to the IPS module or MPS-14/2 module authentication of the iSCSI initiator, the IPS module
or MPS-14/2 module also supports a mechanism for the iSCSI initiator to authenticate the Cisco MDS
switch’s iSCSI target during the iSCSI login phase. This authentication requires the user to configure a
username and password for the switch to present to the iSCSI initiator. The provided password is used
to calculate a CHAP response to a CHAP challenge sent to the IPS port by the initiator.
To configure a global iSCSI target username and password to be used by the switch to authenticate itself
to an initiator using Device Manager, follow these steps
Step 1 Choose IP > iSCSI and select the Globals tab. You see the iSCSI initiators for this switch.
Step 2 Set the Target UserName and Password fields to the username and password that you want to use to
authenticate to all iSCSI initiators.
Step 3 Click Apply to save these changes or click Close to discard any unsaved changes.
To configure a per-initiator iSCSI target’s user name and password used by the switch to authenticate
itself to an initiator using Device Manager, follow these steps:
Step 1 Choose IP > iSCSI and select the Initiator tab. You see the iSCSI initiators for this switch.
Step 2 Set the Target UserName and Password fields to the username and password that you want to use to
authenticate to the iSCSI initiator.
Step 3 Click Apply to save these changes or click Close to discard any unsaved changes.
Configuring an iSCSI RADIUS Server
To configure an iSCSI RADIUS server, follow these steps:
Step 1 Configure the RADIUS server to allow access from the Cisco MDS switch's management Ethernet IP
address.
Step 2 Configure the shared secret for the RADIUS server to authenticate the Cisco MDS switch.
Step 3 Configure the iSCSI users and passwords on the RADIUS server.