This section
describes how to set up authentication on
a Solaris host.
The
Lenovo Storage V series system supports two Challenge
Handshake Authentication Protocol (CHAP) methods:
- One-way CHAP
authentication, in which the Lenovo Storage V series system authenticates the host
iSCSI initiator.
- Two-way CHAP authentication, in which both
the Lenovo Storage V series system and the initiator authenticate
each other.
You can enable or
disable authentication using the following
methods:- One-way authentication:
- iscsiadm
modify initiator-node –authentication <CHAP/none>
- iscsiadm modify initiator-node —CHAP-secret
- Two-way authentication:
- iscsiadm
modify target-param –authentication <CHAP/none>
- iscsiadm
modify target-param —bi-directional-authentication <enable/disable>CHAP-secret
- iscsiadm modify target-param —CHAP-secret
Note: The CHAP secret is a minimum of
12 characters and a maximum
of 16 characters.
For more information about setting up authentication,
see the documentation for your host system.