Sun Storage 7110 Unified Storage System: How to configure bidirectional CHAP for Solaris iSCSI initiator

Asset ID:	1-71-1181843.1
Update Date:	2010-09-06
Keywords:

Solution Type Technical Instruction Sure

Solution 1181843.1 : Sun Storage 7110 Unified Storage System: How to configure bidirectional CHAP for Solaris iSCSI initiator

Applies to:

Sun Storage 7110 Unified Storage System - Version: Not Applicable and later   [Release: NA and later ]
Sun Storage 7210 Unified Storage System - Version: Not Applicable and later    [Release: NA and later]
Sun Storage 7310 Unified Storage System - Version: Not Applicable and later    [Release: NA and later]
Sun Storage 7410 Unified Storage System - Version: Not Applicable and later    [Release: NA and later]
Information in this document applies to any platform.

Goal

To configure bidirectional CHAP for Solaris iSCSI initiator

Solution

In case of Bidirectional CHAP authentication, both initiator and target will provide the CHAP user name and secret to each other.

Follow the procedure as in the How-to-document 1181788.1 to set up the unidirectional CHAP which completes setting up CHAP on the initiator and providing its details on the target.

Next, follow the below steps to enable the CHAP for the target.

On your Sun Storage 7000 BUI

Select the target for which you need to enable the CHAP

Configuration -> SAN -> Targets -> iSCSI Targets

[Note: If you have not created the target yet then click on '+']

Click on the pencil icon to edit and add the following details

Initiator authentication mode <-- CHAP
Target CHAP name              <-- tchap (a name)
Target CHAP secret            <-- a string of length 12-16 char

While on the same window, note down the target iqn and Click 'OK'.

On your Solaris iSCSI initiator host, use the following steps to update the target CHAP details

# iscsiadm modify target-param -B enable
# iscsiadm modify target-param -a CHAP <iqn-as-noted-above>
# iscsiadm modify target-param -H <name as above> <iqn-as-noted-above>
# iscsiadm modify target-param -C <iqn-as-noted-above> <-- secret as set above

Now perform the discovery and check if you can see the mapped targets and luns.

# iscsiadm modify discovery -t enable
  OR
# iscsiadm modify discovery -s enable

# iscsiadm list target -S

Attachments

This solution has no attachment