vsphere-esxi-vcenter-server-55-storage-guide

Chapter 11 Configuring iSCSI Adapters and StorageWhen you set the CHAP parameters, specify a security level for CHAP.NOTE When you specify the CHAP security level, how the storage array responds depends on the array’sCHAP implementation and is vendor specific. For information on CHAP authentication behavior indifferent initiator and target configurations, consult the array documentation.Table 11‐4. CHAP Security LevelCHAP Security Level Description SupportedNoneUse unidirectional CHAP ifrequired by targetUse unidirectional CHAPunless prohibited by targetUse unidirectional CHAPThe host does not use CHAP authentication. Select thisoption to disable authentication if it is currentlyenabled.The host prefers a non-CHAP connection, but can use aCHAP connection if required by the target.The host prefers CHAP, but can use non-CHAPconnections if the target does not support CHAP.The host requires successful CHAP authentication. Theconnection fails if CHAP negotiation fails.Software iSCSIDependent hardware iSCSIIndependent hardwareiSCSISoftware iSCSIDependent hardware iSCSISoftware iSCSIDependent hardware iSCSIIndependent hardwareiSCSISoftware iSCSIDependent hardware iSCSIIndependent hardwareiSCSIUse bidirectional CHAP The host and the target support bidirectional CHAP. Software iSCSIDependent hardware iSCSISet Up CHAP for iSCSI Adapter in the vSphere Web ClientWhen you set up CHAP name and secret at the iSCSI adapter level, all targets receive the same parametersfrom the adapter. By default, all discovery addresses or static targets inherit CHAP parameters that you setup at the adapter level.The CHAP name should not exceed 511 alphanumeric characters and the CHAP secret should not exceed255 alphanumeric characters. Some adapters, for example the QLogic adapter, might have lower limits, 255for the CHAP name and 100 for the CHAP secret.Prerequisites• Before setting up CHAP parameters for software or dependent hardware iSCSI, determine whether toconfigure unidirectional or bidirectional CHAP. Independent hardware iSCSI adapters do not supportbidirectional CHAP.• Verify CHAP parameters configured on the storage side. Parameters that you configure must match theones one the storage side.• Required privilege: Host.Configuration.Storage Partition ConfigurationProcedure1 Display storage adapters and select the iSCSI adapter to configure.2 Under Adapter Details, click the Properties tab and click Edit in the Authentication panel.3 Specify authentication method.• None• Use unidirectional CHAP if required by target• Use unidirectional CHAP unless prohibited by targetVMware, Inc. 93