12.07.2015 Views

vsphere-esxi-vcenter-server-55-storage-guide

vsphere-esxi-vcenter-server-55-storage-guide

vsphere-esxi-vcenter-server-55-storage-guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

vSphere StorageRemove Static Targets in the vSphere Web ClientRemove targets that appear on the Static Discovery list.Procedure1 Browse to the host in the vSphere Web Client navigator.2 Click the Manage tab, and click Storage.3 Click Storage Adapters and select the iSCSI adapter to modify from the list.4 Under Adapter Details, click the Targets and click Static Discovery.5 Select the static target to remove and click Remove.6 Rescan the iSCSI adapter.If the static target was dynamically discovered, you need to remove it from the <strong>storage</strong> system beforeperforming the rescan. Otherwise, your host will automatically discover and add the target to the list ofstatic targets when you rescan the adapter.Configuring CHAP Parameters for iSCSI AdaptersBecause the IP networks that the iSCSI technology uses to connect to remote targets do not protect the datathey transport, you must ensure security of the connection. One of the protocols that iSCSI implements is theChallenge Handshake Authentication Protocol (CHAP), which verifies the legitimacy of initiators thataccess targets on the network.CHAP uses a three-way handshake algorithm to verify the identity of your host and, if applicable, of theiSCSI target when the host and target establish a connection. The verification is based on a predefinedprivate value, or CHAP secret, that the initiator and target share.ESXi supports CHAP authentication at the adapter level. In this case, all targets receive the same CHAPname and secret from the iSCSI initiator. For software and dependent hardware iSCSI adapters, ESXi alsosupports per-target CHAP authentication, which allows you to configure different credentials for eachtarget to achieve greater level of security.Choosing CHAP Authentication MethodESXi supports unidirectional CHAP for all types of iSCSI initiators, and bidirectional CHAP for softwareand dependent hardware iSCSI.Before configuring CHAP, check whether CHAP is enabled at the iSCSI <strong>storage</strong> system and check the CHAPauthentication method the system supports. If CHAP is enabled, enable it for your initiators, making surethat the CHAP authentication credentials match the credentials on the iSCSI <strong>storage</strong>.ESXi supports the following CHAP authentication methods:Unidirectional CHAPBidirectional CHAPIn unidirectional CHAP authentication, the target authenticates the initiator,but the initiator does not authenticate the target.In bidirectional CHAP authentication, an additional level of security enablesthe initiator to authenticate the target. VMware supports this method forsoftware and dependent hardware iSCSI adapters only.For software and dependent hardware iSCSI adapters, you can set unidirectional CHAP and bidirectionalCHAP for each adapter or at the target level. Independent hardware iSCSI supports CHAP only at theadapter level.92 VMware, Inc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!