Manage initiator security

The Manage Initiator Security page enables you to specify the default iSCSI security method – the security in effect for initiators without an explicit security setting. From this page you can also override the default and set or modify security for a particular initiator.

Initiators are authenticated with one of the following security methods:

none–There will be no authentication for the initiator.

If all the initiators logging into the storage system run within your trusted network, select none for the initiator authentication method.

deny–The initiator will be denied access.

Select deny if you want to prevent access from a specific initiator.

CHAP–The initiator will have to authenticate successfully using Challenge-Handshake Authentication Protocol (CHAP) to access the storage system. If you select CHAP authentication, you must specify an inbound user name and password so the storage system can authenticate the initiator and, optionally, an outbound user name and password so the initiator can authenticate the storage system.

If the storage system is part of a public network, consider using CHAP for the initiator authentication method.

Default–The initiator will use the default security settings. The initial setting for default initiator security is none. When setting the default security method, you can choose none, deny, or CHAP.

The first row of the display shows the default security settings in effect under the headings Default Security Type, Inbound User Name, and Outbound User Name. To modify the default security settings, click “Modify Default Security".

Field	Description
Default Security Type	The type of security used if no security method has been explicitly defined for an initiator.
Inbound User Name	When the security method in use is CHAP, the user name initiators without an explicit security setting use to authenticate to the storage system.
Outbound User Name	When the security method in use is CHAP, the user name the storage system uses to authenticate to initiators without an explicit security setting. This value is optional for CHAP authentication.

The next rows of the display list the security settings for all initiators known to the system. The security settings for each initiator are listed under the headings Initiator, Security Type, Group, Inbound User Name, and Outbound User Name. Initiators that have already been added to the storage system are displayed on this page even if their security method is not yet defined. If a security method is not yet defined, the initiator uses the default initiator security type.

Field	Description
Initiator	The initiator name in the iSCSI node name format. Because you can define security for an initiator before defining the initiator itself, some initiators listed in this column may not yet exist.
Security Type	The method of security that will be used when the initiator attempts to access the storage system: none, deny or CHAP. If the value of this field is default, then the initiator is using the default security shown in the default security display.
Group	The initiator group to which the initiator belongs. If no group is listed, the security has been defined before the initiator itself exists.
Inbound User Name	The user name the initiator uses to authenticate to the storage system.
Outbound User Name	The user name the storage system uses to authenticate to the initiator. This value is optional for CHAP authentication.

To modify security for one or more initiators, select the associated checkbox for each initiator you want to modify, then click Modify.