Sun Storage 7000 Unified Storage System: How to configure bidirectional CHAP for Solaris iSCSI initiator

Asset ID:	1-71-1181843.1
Update Date:	2013-07-18
Keywords:

Solution Type Technical Instruction Sure

Solution 1181843.1 : Sun Storage 7000 Unified Storage System: How to configure bidirectional CHAP for Solaris iSCSI initiator

Applies to:

Sun ZFS Storage 7320 - Version Not Applicable to Not Applicable [Release N/A]
Sun ZFS Storage 7420 - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7110 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7210 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
Sun ZFS Storage 7120 - Version Not Applicable to Not Applicable [Release N/A]
7000 Appliance OS (Fishworks)

Goal

This document will show how to configure bidirectional CHAP for Solaris iSCSI initiator.

To discuss this information further with Oracle experts and industry peers, we encourage you to review, join or start a discussion in the My Oracle Support Community - Disk Storage ZFS Storage Appliance Community

Solution

In case of Bidirectional CHAP authentication, both initiator and target will provide the CHAP user name and secret to each other.

Follow the procedure as in the <Document 1181788.1> to set up the unidirectional CHAP which completes setting up CHAP on the initiator and providing its details on the target.

Next, follow the below steps to enable the CHAP for the target.

On your Sun Storage 7000 BUI

Select the target for which you need to enable the CHAP

Configuration -> SAN -> Targets -> iSCSI Targets

[Note: If you have not created the target yet then click on '+']

Click on the pencil icon to edit and add the following details

Initiator authentication mode <-- CHAP
Target CHAP name <-- tchap (a name)
Target CHAP secret <-- a string of length 12-16 char

While on the same window, note down the target iqn and Click 'OK'.

On your Solaris iSCSI initiator host, use the following steps to update the target CHAP details

# iscsiadm modify target-param -B enable
# iscsiadm modify target-param -a CHAP <iqn-as-noted-above>
# iscsiadm modify target-param -H <name as above> <iqn-as-noted-above>
# iscsiadm modify target-param -C <iqn-as-noted-above> <-- secret as set above

Now perform the discovery and check if you can see the mapped targets and luns.

# iscsiadm modify discovery -t enable
OR
# iscsiadm modify discovery -s enable

# iscsiadm list target -S

Return to <Document 1398581.1> Sun Storage 7000 Unified Storage System: How to Troubleshoot iSCSI Problems.

References

<NOTE:1181788.1> - Sun Storage 7000 Unified Storage System: How to configure unidirectional CHAP for Solaris iSCSI initiator
<NOTE:1398581.1> - Sun Storage 7000 Unified Storage System: How to Troubleshoot iSCSI Problems

Attachments

This solution has no attachment