ONTAP 9.14.1 commands

vserver iscsi security modify

Modify the iSCSI authentication configuration for an initiator

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.


The command modifies an existing authentication method for an initiator. To delete the authentication setting for an initiator, use the vserver iscsi security delete command.

The outbound CHAP password and user name are optional. If you want a bi-directional handshake, you need to configure both inbound and outbound CHAP passwords and user names.

You do not need to know the inbound or outbound passwords to change them.


-vserver <Vserver Name> - Vserver

Specifies the Vserver.

-i, -initiator-name <text> - Initiator Name

Specifies the initiator name that you want to modify the existing authentication method.

[-s, -auth-type {CHAP|deny|none}] - Authentication Type

Specifies the authentication type:

  • CHAP - Authenticates using a CHAP user name and password.

  • none - The initiator can access the Vserver without authentication.

  • deny - The initiator cannot access the Vserver.

[-n, -user-name <text>] - Inbound CHAP User Name

Specifies the inbound CHAP user name. CHAP user names can be one to 128 bytes. A null user name is not allowed. If provided, you will be prompted to provide the corresponding inbound CHAP password.

{ [-m, -outbound-user-name <text>] - Outbound CHAP User Name

Specifies the outbound CHAP user name. CHAP user names can be one to 128 bytes. If provided, you will be prompted to enter the corresponding outbound CHAP password.

| [-clear-outbound <true>] - Clear Outbound CHAP Parameters }

Removes the outbound user name and the outbound password information from the authentication method. After you clear the outbound information, you no longer have a bi-directional handshake.


cluster1::> vserver iscsi security modify -vserver vs_1 -initiator iqn.1992-08.com.example:abcdefg -auth-type chap -user-name bob -outbound-user-name bob_out


Outbound Password:

Changes user names and passwords for initiator iqn.1992-08.com.example:abcdefg on Vserver vs_1.

Top of Page