System information

12-308
Cisco SN 5428-2 Storage Router Software Configuration Guide
78-15471-01
Chapter 12 Command Line Interface Reference
scsirouter target accesslist
• Use the target all form of this command to create an association between the specified access list
and all targets.
• Use the reserved access list name none to remove any access list associations for the specified target.
This effectively prevents access to this storage target from any IP host.
• Use the reserved access list name any to allow access to this storage target from any IP host.This is
effectively “open access.”
• Existing connections and logins are not affected by an access list change. However, if there are
existing connections, the storage router issues a warning message with that information in response
to this command.
Note When making changes to SCSI routing instances (such as adding or deleting targets or changing access)
be sure to make the complimentary changes to the iSCSI configuration of IP hosts using these services
to access the storage resources. See the readme files for the appropriate iSCSI drivers for additional
details. You can access the latest iSCSI drivers and readme and example configuration files from
Cisco.com.
Examples The following example creates an association between the storage target webserver4 (accessed via SCSI
routing instance foo) and the access list webserver2. By default, the IP hosts identified by the webserver2
access list will be allowed read/write device access to the target.
[SN5428-2A]# scsirouter foo target webserver4 accesslist webserver2
The following example provides the IP hosts identified in the access list named media read-only access
to all targets accessed via SCSI routing instance LabA:
[SN5428-2A]# scsirouter LabA target all accesslist media ro
Note Some host operating systems impose restrictions on the use of read-only access lists. For details, see the
readme files and Release Notes for Cisco iSCSI Driver for your IP host operating system.
The following example provides the IP hosts identified by the access list webcheck read-only device
access, and provides the IP hosts identified by access list webserver2 read/write device access, to the
target webserver3:
[SN5428-2A]# scsirouter foo target webserver3 accesslist webcheck ro
Setting read-only accesslist to 'webcheck' for scsirouter 'foo' target 'webserver3
*[SN5428-2A]# scsirouter foo target webserver3 accesslist webserver2 rw
Setting read-write accesslist to 'webserver2' for scsirouter 'foo' target 'webserver3