Brocade Fabric OS Administrator's Guide Supporting Fabric OS v6.3.0 (53-1001336-02, November 2009)

Fabric OS Administrator’s Guide 277
53-1001336-02
Discovery domain and domain set configuration
12
Displaying iSCSI VT state and status
The following information can be displayed for each iSCSI VT:
• Name — IQN for the iSCSI VT.
• State — Whether the FC target is online or offline.
• Status — Whether the iSCSI VT has been defined (configuration completed but not committed)
or is committed (active and available to iSCSI initiators).
• Authentication method — Indicates CHAP if authentication is enabled for the iSCSI VT.
1. Connect and log in to the switch.
2. Enter the iscsiCfg
--show tgt command with the -v option to display the iSCSI VTs:
switch:admin> iscsicfg --show tgt -v
Number of records found: 2
Name: iqn.2006-10.com.example-disk001
State/Status: Online/Defined
Auth. Method: None
Name: iqn.2002-10.com.brocade:21:00:00:04:cf:e7:74:cf
State/Status: Online/Defined
Auth. Method: None
Discovery domain and domain set configuration
Discovery domains and discovery domain sets can be used to configure access control between
iSCSI initiators and iSCSI VTs manually.
A discovery domain (DD) controls iSCSI initiator access to iSCSI VTs. A DD is a group of
iSCSI initiators and iSCSI VTs identified by IQNs. The iSCSI initiators can access only the iSCSI VTs
that are in the DD to which they are assigned. When there are no discovery domains, all iSCSI
initiators can access all iSCSI VTs.
If iSNS (internet storage name service) is enabled, then configure access control on the iSNS
server; discovery domains and discovery domain sets configured in Fabric OS are not supported if
the iSNS service is enabled on the fabric.
You can create four discovery domain sets (DDSets), but only one set can be enforced at a time.
Discovery domain sets allow you to enable and disable fabric-wide iSCSI VT access with a single
command.
An enabled DDSet is enforced fabric-wide. In a deployment with an active DDSet, only iSCSI
initiators in an enforced DD can access iSCSI VT in the same DD.
If you do not configure either discovery domains or iSNS for access control, then any iSCSI initiator
on the IP network can access all iSCSI VTs (and therefore all FC targets) in the fabric.
Displaying iSCSI initiator IQNs
All iSCSI components in a DD must be identified using IQNs. Fabric OS temporarily stores the IQNs
and IP addresses of iSCSI initiators that have logged in the gateway.