Administrator Guide

the correct shared secret to access Storage Center (target) volumes. To enable bidirectional CHAP authentication, unique
shared secrets (passwords) must be configured for the remote initiator and the target Storage Center.
About this task
NOTE: Changing CHAP settings will cause existing iSCSI connections between SAN systems using the selected fault
domain to be lost. You will need to use the Configure iSCSI Connection wizard to reestablish the lost connections after
changing CHAP settings.
Steps
1. If you are connected to a Data Collector, select a Storage Center from the drop-down list in the left navigation pane of
Unisphere Central.
2. From the SYSTEM menu, click Ports.
The Ports view is displayed.
3. Click the Front End Ports tab.
4. Expand iSCSI and click the fault domain link.
The Fault Domain view is displayed.
5. On the Summary tab, click
(More Actions) and select Configure CHAP.
The Configure CHAP dialog box opens.
6. Select the CHAP Enabled checkbox.
7. (Bidirectional CHAP only) In the Bidirectional CHAP Secret field, type the shared secret that the Storage Center (target)
must provide when challenged by the remote initiator. If this field is empty, bidirectional CHAP authentication is not enabled.
8. Define the CHAP configuration for each server in the fault domain that initiates iSCSI connections to the Storage Center.
a. Click Add.
The Add Remote CHAP Initiator dialog box opens.
b. In the iSCSI Name field, type the iSCSI name of the remote initiator.
c. In the Remote CHAP Name field, type the CHAP name of the remote initiator.
d. In the Remote CHAP Secret field, type the shared secret that the remote initiator must provide when challenged by the
Storage Center (target).
e. (Bidirectional CHAP only) In the Local CHAP Secret field, type the shared secret that the Storage Center (target) must
provide when challenged by the remote initiator. This secret is required if bidirectional CHAP is enabled on the remote
iSCSI initiator. This is the same shared secret that is typed into the Bidirectional CHAP Secret field for Local CHAP
Configuration on the Configure CHAP dialog box.
f. Click OK.
The Add Remote CHAP Initiator dialog box closes.
9. Click OK.
The Configure CHAP dialog box closes.
10. Configure each remote iSCSI initiator to use the shared secrets that you defined.
Modify CHAP Settings for a Server in an iSCSI Fault Domain
Modify CHAP settings for a server to change one or more shared secrets for the server.
About this task
NOTE:
Changing CHAP settings will cause existing iSCSI connections between SAN systems using the selected fault
domain to be lost. You will need to use the Configure iSCSI Connection wizard to reestablish the lost connections after
changing CHAP settings.
Steps
1. If you are connected to a Data Collector, select a Storage Center from the drop-down list in the left navigation pane of
Unisphere Central.
2. From the SYSTEM menu, click Ports.
The Ports view is displayed.
3. Click the Front End Ports tab.
4. Expand iSCSI and click the fault domain link.
Storage Center Maintenance
179