2002 - cesnet

Cisco: Authentication using a locally defined list of initiators, the RADIUS andTACACS+ servers. The CHAP protocol is used. In addition, access lists and virtualnetworks can be used.We tested the configuration and operation of the previously mentioned authenticationmechanism and found them functional. The Nishan device wasborrowed only for a limited time, which was further reduced by searching fora working firmware version. Therefore, we did not test authentication mechanismsof this device.16.4 Conclusion16.4.1 Linux as Initiator/TargetDuring the preparation of this report, authors of the document were aware ofthree software-based partial or complete iSCSI solutions on the PC GNU/Linuxplatform. None of them seems to be suitable for the routine use yet. This area ishowever still under development.As it is obvious from the table provided above, there is a substantial speed degradationoccurring if very small blocks are transmitted over iSCSI. NFS provideshigher speeds for high data volume requests.The previously mentioned measurements indicate that the Linux kernel versionand installation of patches considerably affect the performance.16.4.2 Commercial ProductsBoth tested products (IPS 3300, SN 5428) meet the basic functionality requirements.Only the last one of several tested firmware versions for the Nishan devicewas usable for iSCSI. However, in this version, the part concerning SNS wasunusable and therefore the functionally of this protocol and its implementationcould not be tested.16.5 Further Work ProgressIn the following period, we intend to perform testing of other iSCSI features,which have not yet been tested or satisfactorily implemented in borrowed de-182 High-speed National Research Network and its New Applications 2002