IBM DS3500 - Mutual Authentication

7914Admin_iSCSI.fm Draft Document for Review March 28, 2011 12:24 pm
322 IBM System Storage DS3500: Introduction and Implementation Guide
4. Figure 13-3 shows the “Enter Target CHAP Secret” dialog. Enter a CHAP secret that is at
least 12 characters long. Repeat the text in second line to confirm.
Alternatively, click Generate Random Secret to generate a 16 character long secret.
Figure 13-3 Target CHAP secret
5. Click OK to return to the Target Authentication window (Figure 13-2 on page 321). Click
OK to save the modifications.
13.3.2 Mutual Authentication
With Mutual Authentication, a CHAP secret is configured that a specific initiator must use it to
get access to the storage subsystem. That is also called initiator authentication or
bi-directional authentication. Each initiator can have its own CHAP secret.
Do the following steps:
1. In the Manage iSCSI Settings window (Figure 13-2 on page 321), select the Mutual
Authentication tab.
2. In the tab as in Figure 13-4 on page 323 select a host port that has already been defined,
as described in 13.7.2, “Defining new iSCSI host” on page 334. The host port is referred to
as Initiator Label. In this example there is no CHAP secret defined (No permissions
entered) for this initiator, as shown in the last column - “Permission Set?”. Click CHAP
Secret.