Dell CLARiiON AX4 CX-Series iSCSI Security Setup Guide
Dell CLARiiON AX4 Manual
 |
View all Dell CLARiiON AX4 manuals
Add to My Manuals
Save this manual to your list of manuals |
Dell CLARiiON AX4 manual content summary:
- Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 1
CX-Series iSCSI Security Setup Guide P/N 300-002-315 REV A03 July 14, 2005 This document introduces iSCSI security for CX-Series storage systems and tells how to set up iSCSI - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 2
iSCSI Security Overview iSCSI Security Overview EMC® CLARiiON® iSCSI storage systems support Challenge Handshake Authentication Protocol (CHAP) for iSCSI network security. CHAP is a method of interface card (NIC) for your iSCSI connection, enable CHAP. 2 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 3
you are configuring CHAP for iSCSI HBAs, you enable CHAP on the storage system after configuring CHAP for the HBAs. CX-Series iSCSI Security Setup Guide 3 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 4
iSCSI configuration in the CX300, CX300i, CX500, CX500i, and CX700 Storage Systems Configuration and Planning Guide and have the worksheets available. ❑ On a Windows server that uses NICs, clear any existing Targets tab, remove any persistent targets. 4 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 5
section of the CX300, CX300i, CX500, CX500i, and CX700 Storage Systems Configuration and Planning Guide. 1. From your storage-system management station, start Navisphere Manager on the storage system you are , in the iSCSI CHAP Management window, click Add. CX-Series iSCSI Security Setup Guide 5 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 6
Mutual CHAP worksheet in the iSCSI configuration section of the CX300, CX300i, CX500, CX500i, and CX700 Storage Systems Configuration and Planning Guide. 1. From your storage-system management station, start Navisphere Manager on the storage system you are configuring. 2. In the Enterprise Storage - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 7
iSCSI Port Properties window. Authentication for the iSCSI port is enabled. 3. Click OK to exit the iSCSI Port Management window. CX-Series iSCSI Security Setup Guide 7 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 8
was installed. If this software is not installed, then before continuing install the latest supported version as described in the storage-system setup guide. For information on the supported version, refer to EMC Support Matrix on the EMC website: http://powerlink.emc.com. Configuring CHAP on the - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 9
Mutual Authentication. d. Click OK in the Advanced Settings dialog box. e. Click OK in the Logon to Target Portal dialog box. CX-Series iSCSI Security Setup Guide 9 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 10
it is not connected, click Refresh. You have set and enabled CHAP security on the server and storage system. 10 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 11
configuration. Your version of iscsi.conf may be different from the file shown below. This example shows some configuration guidelines. CX-Series iSCSI Security Setup Guide 11 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 12
"OutgoingUsername" and "Outgoing # Password" fields specify the initiator authentication and "IncomingUsername" # and "IncomingPassword" can be used for target authentication. # 12 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 13
local to a category. If # they are specified in the 1st column they are by default considered as global # values. # # Example: # CX-Series iSCSI Security Setup Guide 13 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 14
entries # will take the global values if any in the config file, else the default # values will take effect. 14 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 15
be "bob" and IncomingPassword will # be "bob123". # You have set and enabled basic security on the server and storage system. 4. Restart the iSCSI service: /etc/init.d/iscsi stop /etc/init.d/iscsi start 5. Restart the Navisphere Host Agent or run the Navisphere Server Utility to update the storage - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 16
SPB) Username=john Password=welcome DiscoveryAddres=127.0.0.5(Storage System3 SPA) DiscoveryAddres=127.0.0.6(Storage System3 SPB) Username=betty Password=bienvenue 16 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 17
Initiators in a Linux Server You have completed the setup and enabling of advanced security on the server and storage system. 3. Restart the iSCSI service: /etc/init.d/iscsi stop /etc/init.d/iscsi start 4. Restart the Navisphere Host Agent or run the Navisphere Server Utility to update the storage - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 18
installed. If this software is not installed, then before continuing, install the latest supported version as described in the storage-system setup guide. For information on the supported version, refer to the EMC Support Matrix on the EMC website: http://powerlink.emc.com. QLogic uses the following - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 19
OK. 8. Save your changes on the Target Settings window (the default password is config). Verify that your session remains active. CX-Series iSCSI Security Setup Guide 19 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 20
exit the iSCSI Port Management window. You have set and enabled CHAP security on the server and storage system. 20 CX-Series iSCSI Security Setup Guide - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 21
you want to delete, and click OK. 4. In the confirmation dialog box, click Yes. 5. In the message box, click OK. CX-Series iSCSI Security Setup Guide 21 - Dell CLARiiON AX4 | CX-Series iSCSI Security Setup Guide - Page 22
copying, and distribution of any EMC software described in this publication requires an applicable software license. Trademark Information EMC2, EMC, CLARiiON, Navisphere, and PowerPath are registered trademarks and Access Logix, FLARE, Powerlink, SAN Copy, SnapView and MirrorView are trademarks of
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
 |
 |
1
This document introduces iSCSI security for CX-Series storage systems
and tells how to set up iSCSI security on the storage system and the
server (host) connected to the iSCSI data ports on the storage system.
Topics include:
◆
iSCSI Security Overview
......................................................................
2
◆
Preparing for CHAP
..............................................................................
4
◆
Setting Up CHAP on the Storage System
..........................................
5
◆
Configuring CHAP on NIC Initiators in a Windows Server
...........
8
◆
Configuring CHAP on NIC Initiators in a Linux Server
...............
11
◆
Configuring CHAP on HBA Initiators in a Server
.........................
18
◆
Modifying CHAP Credentials on the Storage System
...................
21
CX-Series
iSCSI Security
Setup Guide
P/N 300-002-315
REV A03
July 14, 2005