Administrator’s Command Line Guide
Table Of Contents
- Introduction
- Accessing Acronis Storage Clusters via iSCSI
- Preparing to Work with Acronis Storage iSCSI Targets
- Creating and Running Acronis Storage iSCSI Targets
- Listing Acronis Storage iSCSI Targets
- Transferring Acronis Storage iSCSI Targets Between Acronis Storage Nodes
- Stopping Acronis Storage iSCSI Targets
- Deleting Acronis Storage iSCSI Targets
- Configuring Multipath I/O for Acronis Storage iSCSI Targets
- Managing CHAP Accounts for Acronis Storage iSCSI Targets
- Managing LUN Snapshots
- Accessing Acronis Storage Clusters via S3 Protocol
- Monitoring Acronis Storage Clusters
- Managing Cluster Security
- Maximizing Cluster Performance
5.3. Password-based Authentication
# vstorage -c Cluster-Name make-mds -I -a MDS-IP-Address -r Journal-Directory -p
The specified address will then be used for MDS interconnection and intercommunication with the other
servers in the cluster.
2. You set up a chunk server:
# vstorage -c Cluster-Name make-cs -r CS-Directory
Once it is created, the chunk server connects to the MDS server and binds to the IP address it uses to
establish the connection. If the chunk server has several networks cards, you can explicitly assign the
chunk server to the IP address of a specific network card so that all communication between the chunk
and MDS servers is carried out via this IP address.
To bind a chunk server to a custom IP address, you pass the -a option to the vstorage make-cs command
when you create the chunk server:
# vstorage make-cs -r CS-Directory -a Custom-IP-Address
Note: A custom IP address must belong to the BackNet not to compromise your cluster security.
3. You mount the cluster on the client:
# vstorage-mount -c Cluster-Name Mount-Directory
Once the cluster is mounted, the client connects to the MDS and chunk server IP addresses.
This example configuration provides a high level of security for server communication because the MDS server,
the chunk server, and the client are located on the isolated BackNet and cannot be compromised.
5.3 Password-based Authentication
Acronis Storage uses password-based authentication to enhance security in clusters. You have to pass the
authentication phase before you can add a new server to the cluster.
Password-based authentication works as follows:
1. You set the authentication password when you create the first MDS server in the cluster. The password
you specify is encrypted and saved into the /etc/vstorage/clusters/stor1/auth_digest.key file on the server.
61