HP StorageWorks Advanced Web Tools 7.4.X Administrator Guide (AA-RVHFC-TE, September 2005)

100 Managing the iSCSI Gateway
2. Optional: Zoning-based access control is required, but you can also use iSCSI shared secrets (that is,
CHAP, access control) for enhanced security. If you choose to configure CHAP access control, see
”Configuring CHAP” on page 100 to configure the shared secret for the Fibre Channel targets. When
you configure the iSCSI initiator driver, you define the shared secret for the initiator.
3. Configure the iSCSI gateway ports using the procedure in ”Configuring a port” on page 46.
4. Configure the iSCSI initiator driver.
See the documentation from the iSCSI driver supplier for details for this step, but note that you typically
need to add in the IP address for the iSCSI target portals. You set this address when you configure the
iSCSI gateway ports. Next, you specify the Fibre Channel target names.
If you are configuring CHAP for the initiators, do it at this time.
Creating an iSCSI initiator
Use the following procedure to create iSCSI initiators. You can, as an option, configure a CHAP secret at
this time.
1. Access the Switch Manager of the primary IP configuration server.
2. Click iSCSI Gateway in the navigation bar.
3. Click the iSCSI Devices tab. (See Figure 41 on page 99.)
4. Click New Initiator in the task bar.
The New iSCSI Initiator window opens.
5. Enter the name in the iSCSI Name box.
6. Optional: Enter a CHAP secret in the CHAP Secret box to create a CHAP secret for the new initiator.
7. Click OK.
Deleting an iSCSI initiator
Use the following procedure to delete iSCSI initiators:
1. Access the Switch Manager of the primary IP configuration server.
2. Click iSCSI Gateway in the navigation bar.
3. Click the iSCSI Devices tab. (See Figure 41 on page 99.)
4. Select the iSCSI initiator to delete.
5. Click Remove Initiator in the task bar.
6. Click Yes in the confirmation window.
Configuring CHAP
The iSCSI standard supports access control with CHAP. Using CHAP is optional. You can configure the
iSCSI gateway to use one-way authentication, in which the target authenticates the host, or two-way
authentication, in which first the target authenticates the host and then the host authenticates the target. You
can also configure CHAP for iSCSI discovery sessions. In an iSCSI discovery session, the iSCSI host
requests information about possible targets.
Configuring iSCSI initiators and CHAP secrets
1. Access the Switch Manager of the primary IP configuration server.
2. Click iSCSI Gateway in the navigation bar.
3. Click the iSCSI Devices tab. (See Figure 41 on page 99.)
4. Click Configure Initiator in the task bar.
The Config iSCSI Initiator window opens (see Figure 42).