vSphere Storage - ESXi 5.1 - Documentation - VMware

Table 11-4. CHAP Security Level (Continued)
CHAP Security Level Description Supported
Use unidirectional CHAP unless
prohibited by target
The host prefers CHAP, but can use non-CHAP
connections if the target does not support CHAP.
Use unidirectional CHAP The host requires successful CHAP authentication. The
connection fails if CHAP negotiation fails.
Software iSCSI
Dependent hardware iSCSI
Independent hardware
iSCSI
Software iSCSI
Dependent hardware iSCSI
Independent hardware
iSCSI
Use bidirectional CHAP The host and the target support bidirectional CHAP. Software iSCSI
Set Up CHAP for iSCSI Adapter in the vSphere Client
Dependent hardware iSCSI
You can set up all targets to receive the same CHAP name and secret from the iSCSI initiator at the initiator
level. By default, all discovery addresses or static targets inherit CHAP parameters that you set up at the
initiator level.
The CHAP name should not exceed 511 alphanumeric characters and the CHAP secret should not exceed 255
alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255 for the
CHAP name and 100 for the CHAP secret.
Prerequisites
n Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether to
configure one-way or mutual CHAP. Independent hardware iSCSI adapters do not support mutual
CHAP.
n In one-way CHAP, the target authenticates the initiator.
n In mutual CHAP, both the target and the initiator authenticate each other. Use different secrets for
CHAP and mutual CHAP.
When you configure CHAP parameters, verify that they match the parameters on the storage side.
n Required privilege: Host.Configuration.Storage Partition Configuration
Procedure
1 Access the iSCSI Initiator Properties dialog box.
2 On the General tab, click CHAP.
Chapter 11 Configuring iSCSI Adapters and Storage
VMware, Inc. 103