No Authentication; Chap With Local Password Database; Chap With External Radius Server - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual
Cisco mds 9000 family cli configuration guide - release 4.x (ol-18084-01, february 2009)
Hide thumbs
Also See for AP776A - Nexus Converged Network Switch 5020:
- Command reference manual (1640 pages) ,
- Configuration manual (1486 pages) ,
- Reference (886 pages)
Table of Contents
Advertisement
Chapter 43
Configuring iSCSI
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
No Authentication
Set the iSCSI authentication method to none to configure a network with no authentication.
switch(config)# iscsi authentication none
CHAP with Local Password Database
To configure authentication using the CHAP option with the local password database, follow these steps:
Set the AAA authentication to use the local password database for the iSCSI protocol.
Step 1
switch(config)# aaa authentication iscsi default local
Set the iSCSI authentication method to require CHAP for all iSCSI clients.
Step 2
switch(config)# iscsi authentication chap
Configure the user names and passwords for iSCSI users.
Step 3
switch(config)# username iscsi-user password abcd iscsi
Note
Verify the global iSCSI authentication setup.
Step 4
switch# show iscsi global
iSCSI Global information Authentication: CHAP <----Verify
Import FC Target: Disabled
...
CHAP with External RADIUS Server
To configure authentication using the CHAP option with an external RADIUS server, follow these steps:
Configure the password for the Cisco MDS switch as RADIUS client to the RADIUS server:
Step 1
switch(config)# radius-server key mds-1
Configure the RADIUS server IP address by performing one of the following:
Step 2
Configure an IPv4 address.
switch(config)# radius-server host 10.1.1.10
Configure an IPv6 address.
switch(config)# radius-server host 2001:0DB8:800:200C::417A
Step 3
Configure the RADIUS server group IP address by performing one of the following:
Configure an IPv4 address.
switch(config)# aaa group server radius iscsi-radius-group
OL-18084-01, Cisco MDS NX-OS Release 4.x
If you do not specify the iscsi option, the user name is assumed to be a Cisco MDS switch user
instead of an iSCSI user.
iSCSI Authentication Setup Guidelines and Scenarios
Cisco MDS 9000 Family CLI Configuration Guide
43-67
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
