Chelsio Communications Chelsio T4 Guía de usuario descargar pdf (Pagina 117)

Chapter VII. iSCSI PDU Offload Target

a) no CHAP

b) CHAP Oneway or

c) CHAP Mutual

Auth_CHAP_Policy=Mutual, the Chelsio iSCSI target will accept a relevant initiator if it does

a) no CHAP or

b) CHAP Mutual

With AuthMethod=None, regardless the setting of the key Auth_CHAP_Policy, the Chelsio

iSCSI target will only accept a relevant initiator if it does no CHAP.

With AuthMethod=CHAP, CHAP is enforced on the target:

i. Auth_CHAP_Policy=Oneway, the iSCSI target will accept a relevant initiator only if it does

a) CHAP Oneway or

b) CHAP Mutual

ii. Auth_CHAP_Policy=Mutual, the iSCSI node will accept a relevant initiator only if it does

a) CHAP Mutual

4.6. Target Access Control List (ACL) Configuration

The Chelsio iSCSI target supports iSCSI initiator authorization via an Access Control List (ACL).

ACL configuration is supported on a per-target basis. The creation of an ACL for a target

establishes:

Which iSCSI initiators are allowed to access it

The type of the access: read-writeor read-only

Possible SCSI layer associations of LUNs with the initiator



be independently configured.

The format for ACL rule is as follows:

ACL=[iname=<initiator name>][;<sip=<source ip addresses>]

[;dip=<destination ip addresses>][;lun=<lun_list>:<permissions>]

target:

TargetName=iqn.2006-02.com.chelsio.diskarray.san1

TargetDevice=/dev/sda

# initiator “iqn.2006-02.com.chelsio.san1” is allowed

1 2 ... 112 113 114 115 116 117 118 119 120 121 122 ... 373 374

Sin comentarios

Chelsio Communications Chelsio T4 Guía de usuario Pagina 117