<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:48:06" />
    <title>Configuring CHAP with External RADIUS Server </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=2003;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1090170"> </a><h1 class="pTitle">
Configuring CHAP with External RADIUS Server

</h1>
<a name="wp1123854"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1090173"> </a><p class="pBody">
To configure authentication using the CHAP option with an external RADIUS server, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1334877"> </a><li class="pSmartList1">Configure the password for the Cisco MDS switch as RADIUS client to the RADIUS server:
</li>
<div class="pSmartList2"><ol type="a" class="pSmartList2">
<a name="wp1334878"> </a><li class="pSmartList2">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">Switches </b><span style="font-weight: bold">&gt; </span><b style="font-weight: bold" class="cBold">Security </b><span style="font-weight: bold">&gt; </span><b style="font-weight: bold" class="cBold">AAA</b><span style="font-weight: bold"> &gt;</span> <b class="cBold">RADIUS </b>in the Physical Attributes pane.</li>
<a name="wp1334879"> </a><li class="pSmartList2">Click the <b class="cBold">Default</b> tab in the Information pane.</li>
<a name="wp1334880"> </a><li class="pSmartList2">Set the AuthKey field to the default password and click the <b class="cBold">Apply Changes</b> icon.</li>
</ol></div>
<a name="wp1334882"> </a><li class="pSmartList1">Configure the RADIUS server IP address:
</li>
<div class="pSmartList2"><ol type="a" class="pSmartList2">
<a name="wp1334883"> </a><li class="pSmartList2">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">Switches </b><span style="font-weight: bold">&gt; </span><b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold"> &gt; </span><b style="font-weight: bold" class="cBold">AAA</b><span style="font-weight: bold"> &gt;</span> <b class="cBold">RADIUS </b>in the Physical Attributes pane.</li>
<a name="wp1334884"> </a><li class="pSmartList2">Click the <b class="cBold">Server</b> tab in the Information pane and click<span style="font-weight: bold"> </span><b class="cBold">Create Row</b>.</li>
<a name="wp1334886"> </a><li class="pSmartList2">Set the Index field to a unique number.</li>
<a name="wp1334887"> </a><li class="pSmartList2">Set the IP Type radio button to <b class="cBold">ipv4</b> or <b class="cBold">ipv6</b>.</li>
<a name="wp1334888"> </a><li class="pSmartList2">Set the Name or IP Address field to the IP address of the RADIUS server and click <b class="cBold">Create</b>.</li>
</ol></div>
<a name="wp1334890"> </a><li class="pSmartList1">Create a RADIUS server group and add the RADIUS server to the group:
</li>
<div class="pSmartList2"><ol type="a" class="pSmartList2">
<a name="wp1334891"> </a><li class="pSmartList2">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">Switches </b><span style="font-weight: bold">&gt; </span><b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold"> &gt; </span><b class="cBold">AAA </b>in the Physical Attributes pane.</li>
<a name="wp1334892"> </a><li class="pSmartList2">Select the<b class="cBold"> Server Groups </b>tab in the Information pane and click<span style="font-weight: bold"> </span><b class="cBold">Create Row</b>.</li>
<a name="wp1334894"> </a><li class="pSmartList2">Set the Index field to a unique number.</li>
<a name="wp1334895"> </a><li class="pSmartList2">Set the Protocol radio button to <b class="cBold">radius</b>.</li>
<a name="wp1334896"> </a><li class="pSmartList2">Set the Name field to the server group name.</li>
<a name="wp1334903"> </a><li class="pSmartList2">Set the ServerIDList to the index value of the RADIUS server (as created in <a href="ciscsi096.html#wp1334882">Step&#160;2</a> <a href="ciscsi096.html#wp1334886">c.</a>) and click <b class="cBold">Create</b>.</li>
</ol></div>
<a name="wp1334904"> </a><li class="pSmartList1">Set up the authentication verification for the iSCSI protocol to go to the RADIUS server.
</li>
<div class="pSmartList2"><ol type="a" class="pSmartList2">
<a name="wp1334905"> </a><li class="pSmartList2">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">Switches</b><span style="font-weight: bold"> &gt; </span><b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold"> &gt; </span><b style="font-weight: bold" class="cBold">AAA</b><span style="font-weight: bold"> </span>in the Physical Attributes pane.</li>
<a name="wp1334906"> </a><li class="pSmartList2">Click the<span style="font-weight: bold"> </span><b style="font-weight: bold" class="cBold">Applications</b><span style="font-weight: bold"> </span>tab in the Information pane.</li>
<a name="wp1334907"> </a><li class="pSmartList2">Right-click on the iSCSI row in the Type, SubType, Function column.</li>
<a name="wp1334911"> </a><li class="pSmartList2">Set the ServerGroup IDList to the index value of the Server Group (as created in <a href="ciscsi096.html#wp1334890">Step&#160;3</a> c) and click <b class="cBold">Create</b>.</li>
</ol></div>
<a name="wp1334912"> </a><li class="pSmartList1">Set up the iSCSI authentication method to require CHAP for all iSCSI clients.
</li>
<div class="pSmartList2"><ol type="a" class="pSmartList2">
<a name="wp1334913"> </a><li class="pSmartList2">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">End Devices</b><span style="font-weight: bold"> &gt; </span><b class="cBold">iSCSI </b>in the Physical Attributes pane.</li>
<a name="wp1334914"> </a><li class="pSmartList2">Select <b class="cBold">chap</b> from the AuthMethod drop-down menu.</li>
<a name="wp1334915"> </a><li class="pSmartList2">Click the <b class="cBold">Apply Changes </b>icon.</li>
</ol></div>
<a name="wp1334916"> </a><li class="pSmartList1">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">End Devices</b><span style="font-weight: bold"> &gt; </span><b class="cBold">iSCSI </b>in the Physical Attributes pane.
</li>
<a name="wp1334917"> </a><li class="pSmartList1">Click the <span style="font-weight: bold">Globals</span> tab in the Information pane to verify that the global iSCSI authentication setup is for 
CHAP.
</li>
<a name="wp1334918"> </a><li class="pSmartList1">In Cisco DCNM-SAN, choose <b style="font-weight: bold" class="cBold">Switches</b><span style="font-weight: bold"> &gt; </span><b style="font-weight: bold" class="cBold">Security</b><span style="font-weight: bold"> &gt; </span><b class="cBold">AAA </b>in the Physical Attributes pane.
</li>
<a name="wp1334919"> </a><li class="pSmartList1">Click the<span style="font-weight: bold"> </span><b style="font-weight: bold" class="cBold">Applications</b><span style="font-weight: bold"> </span>tab in the Information pane to verify the AAA authentication information for 
iSCSI.
</li>
</ol></div>
<a name="wp1334921"> </a><p class="pBody">
To configure an iSCSI RADIUS server, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1334922"> </a><li class="pSmartList1">Configure the RADIUS server to allow access from the Cisco MDS switch&#39;s management Ethernet IP 
address.
</li>
<a name="wp1334923"> </a><li class="pSmartList1">Configure the shared secret for the RADIUS server to authenticate the Cisco MDS switch.
</li>
<a name="wp1334924"> </a><li class="pSmartList1">Configure the iSCSI users and passwords on the RADIUS server.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
