SANtricity express configuration manuals ( CA08872-012 )
Host CHAP Authentication Settings for iSCSI Connections - VMware
To set CHAP authentication, specify a CHAP name up to 511 characters and a CHAP secret up to 255 characters. For some adapters, the maximum number of available characters may be less than the value described here. For example, the maximum value of the QLogic adapter is up to 255 characters for the CHAP name and up to 100 characters for the CHAP secret.
| For settings on the ETERNUS AB/HB series, refer to Configure iSCSI authentication. |
Prerequisites
-
Determine whether to configure a unidirectional CHAP or a bidirectional CHAP before setting the CHAP parameters for the software iSCSI or the dependent hardware iSCSI. Note that the independent hardware iSCSI adapter does not support bidirectional CHAP.
-
Confirm the CHAP parameters specified in the storage system. The parameters to be specified must match the ones that are set in the storage system.
-
Required privileges
Host, Configuration, and Storage Partition Configuration
Steps
-
Access the iSCSI or iSER storage adapter.
-
In the vSphere Client, access the VMware ESXi host.
-
Click the Configure tab.
-
In Storage, click Storage Adapters and select the adapter (vmhba#) that is to be configured.
-
-
Click the Properties tab and then click Edit on the Authentication panel.
-
Specify the authentication method. To configure directional CHAP, select "Use bidirectional CHAP" under the following options.
-
None
-
Use unidirectional CHAP if required by target
-
Use unidirectional CHAP unless prohibited by target
-
Use unidirectional CHAP
-
Use bidirectional CHAP
-
-
Specify the outgoing CHAP name.
The name to be specified must match the one that is configured in the storage system.
-
To set the iSCSI adapter name as the CHAP name, select "Use initiator name".
-
To set the CHAP name that is different from the iSCSI initiator name, deselect "Use initiator name" and then specify the name in the Name textbox.
-
-
Enter the outgoing CHAP secret to be used as part of the authentication. Make sure to use the secret that matches the one entered in the storage system.
-
To configure bidirectional CHAP, specify the CHAP certification to be received. Set different secrets for outgoing CHAP and incoming CHAP.
-
Click OK.
-
Rescan the iSCSI adapter.
