6.0

Table Of Contents
VMware, Inc. 83
Chapter 5 Managing iSCSI Storage
3Enablemutualauthentication.
esxcli <conn_options> iscsi adapter auth chap set --direction=mutual
--mchap_username=<m_name> --mchap_password=<m_pwd> --level=[prohibited,
required] --secret=<string> --adapter=<adapter_name>
Thespecifiedmchap_usernameandsecretmustbesupportedonthestorageside.
Makesurethefollowingrequirementsaremet.
CHAPauthenticationisalreadysetupwhenyoustartsettingupmutualCHAP.
CHAPandmutualCHAPusedifferentusernamesandpasswords.Thesecondusernameand
passwordaresupportedformutualauthenticationonthestorageside.
CHAPandmutualCHAPusecompatibleCHAPlevels.
4Aftersetupiscomplete,performrediscoveryandrescanallstoragedevices.Forexample:
esxcli <conn_options> iscsi adapter discovery rediscover
esxcli <conn_options> storage core adapter rescan --adapter=vmhba36
Enabling iSCSI Authentication with vicfg-iscsi
Thevicfg-iscsi-A -coptionsenableiSCSIauthentication.Mutualauthenticationissupportedforsoftware
iSCSIanddependenthardwareiSCSI,butnotforindependenthardwareiSCSI.See“SettingiSCSICHAP”on
page 62.
To enable mutual authentication
1EnableauthenticationontheESXihost.
vicfg-iscsi <conn_options> -A -c <level> -m <auth_method> -u <auth_u_name> -w <chap_password>
[-i <stor_ip_addr|stor_hostname> [:<portnum>] [-n <iscsi_name]] <adapter_name>
Thespecifiedusernameandpasswordmustbesupportedonthestorageside.
2EnablemutualauthenticationontheESXihost.
vicfg-iscsi <conn_options> -A -c <level> -m <auth_method> -b -u <ma_username>
-w <ma_password> [-i <stor_ip_addr|stor_hostname> [:<portnum>]
[-n <iscsi_name]] <adapter_name>
Makesurethefollowingrequirementsaremet.
CHAPauthenticationisalreadysetupwhenyoustartsettingupmutualCHAP.
CHAPandmutualCHAPusedifferentusernamesandpasswords.Thesecondusernameand
passwordaresupportedformutualauthenticationonthestorageside.
CHAPandmutualCHAPusecompatibleCHAPlevels.
3Aftersetupiscomplete,performrediscoveryandrescanallstoragedevices.
Setting Up Ports for iSCSI Multipathing
Withportbinding,youcreateaseparateVMkernelportforeachphysicalNICusing1:1mapping.Youcanadd
allnetworkadapterandVMkernelportpairstoasinglevSwitch.ThevSphereStoragedocumentationexplains
indetailhowtospecifyportbinding.
Youcannotsetupportsformultipathingbyusing
vicfg-iscsi.
Intheexamplesbelow,specifyoneoftheoptionslistedin“ConnectionOptionsforvCLIHostManagement
Commands”onpage 18inplaceof<conn_options>.
I
MPORTANTTheESX/ESXi4.xESXCLIcommandsforsettingupiSCSIarenolongersupported.