Send documentation comments to mdsfeedback-doc@cisco.com
50-28
Cisco MDS 9000 Family Fabric Manager Configuration Guide
OL-17256-03, Cisco MDS NX-OS Release 4.x
Chapter 50 Configuring iSCSI
Configuring iSCSI
If the iSCSI target is an autogenerated iSCSI target, then the IPS module or MPS-14/2 module
extracts the WWN of the Fibre Channel target from the iSCSI target name and verifies if the initiator
and the Fibre Channel target is in the same Fibre Channel zone or not. If they are, then access is
allowed.
The IPS module or MPS-14/2 module uses the Fibre Channel virtual N port of the iSCSI host and does
a zone-enforced name server query for the Fibre Channel target WWN. If the FC ID is returned by the
name server, then the iSCSI session is accepted. Otherwise, the login request is rejected.
iSCSI Session Authentication
The IPS module or MPS-14/2 module supports the iSCSI authentication mechanism to authenticate the
iSCSI hosts that request access to the storage devices. By default, the IPS modules or MPS-14/2 modules
allow CHAP or None authentication of iSCSI initiators. If authentication is always used, you must
configure the switch to allow only CHAP authentication.
For CHAP user name or secret validation, you can use any method supported and allowed by the Cisco
MDS AAA infrastructure (see
Chapter 41, “Configuring RADIUS and TACACS+”). AAA
authentication supports a RADIUS, TACACS+, or local authentication device.
To configure AAA authentication for an iSCSI user using Fabric Manager, follow these steps:
Step 1 Choose Switches > Security > AAA in the Physical Attributes pane.
You see the AAA configuration in the Information pane.
Step 2 Click the Applications tab.
You see the AAA configuration per application (see Figure 50-26).
Figure 50-26 AAA per Application Configuration
Step 3 Right-click on the ServerGroup Id List field for the iSCSI application and enter the server group that you
want iSCSI to use.
Note You should use an existing server group or create a new server group before configuring it for
iSCSI session authentication.
Step 4 Click the Apply Changes icon to save these changes.
The sections included in this topic are:
• Authentication Mechanism, page 50-29
To Next Page
Loading...
Need help?
General
