6.5.1

Table 11‑4. CHAP Security Level (Continued)
CHAP Security Level Description Supported
Use unidirectional CHAP The host requires successful CHAP authentication. The
connection fails if CHAP negotiation fails.
Software iSCSI
Dependent hardware iSCSI
Independent hardware iSCSI
Use bidirectional CHAP The host and the target support bidirectional CHAP. Software iSCSI
Dependent hardware iSCSI
Set Up CHAP for iSCSI Adapter
When you set up CHAP name and secret at the iSCSI adapter level, all targets receive the same
parameters from the adapter. By default, all discovery addresses or static targets inherit CHAP
parameters that you set up at the adapter level.
The CHAP name cannot exceed 511 alphanumeric characters and the CHAP secret cannot exceed 255
alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255
for the CHAP name and 100 for the CHAP secret.
Prerequisites
n
Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether to
configure unidirectional or bidirectional CHAP. Independent hardware iSCSI adapters do not support
bidirectional CHAP.
n
Verify CHAP parameters configured on the storage side. Parameters that you configure must match
the ones on the storage side.
n
Required privilege: Host.Configuration.Storage Partition Configuration
Procedure
1 Display storage adapters and select the iSCSI adapter to configure.
2 Under Adapter Details, click the Properties tab and click Edit in the Authentication panel.
3 Specify authentication method.
n
None
n
Use unidirectional CHAP if required by target
n
Use unidirectional CHAP unless prohibited by target
n
Use unidirectional CHAP
n
Use bidirectional CHAP. To configure bidirectional CHAP, you must select this option.
4 Specify the outgoing CHAP name.
Make sure that the name you specify matches the name configured on the storage side.
n
To set the CHAP name to the iSCSI adapter name, select Use initiator name.
vSphere Storage
VMware, Inc. 103