<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:48:06" />
    <title>iSCSI-Based Access Control </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1925;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1076433"> </a><h1 class="pTitle">
iSCSI-Based Access Control

</h1>
<a name="wp1076438"> </a><p class="pBody">
iSCSI-based access control is applicable only if static iSCSI virtual targets are created (see the <a href="ciscsi006.html">&quot;Static 
Mapping&quot; topic</a>). For a static iSCSI target, you can configure a list of iSCSI initiators that are allowed 
to access the targets.

</p>
<a name="wp1076440"> </a><p class="pBody">
By default, static iSCSI virtual targets are not accessible to any iSCSI host. You must explicitly configure 
accessibility to allow an iSCSI virtual target to be accessed by all hosts. The initiator access list can 
contain one or more initiators. The iSCSI initiator can be identified by one of the following mechanisms:

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1076441"> </a><li class="pSmartList1">iSCSI node name 
</li>
<a name="wp1076442"> </a><li class="pSmartList1">IPv4 address and subnet
</li>
<a name="wp1076443"> </a><li class="pSmartList1">IPv6 address 
</li>
</ul></div>
<a name="wp1076444"> </a><p class="pBodyAutonumNoRule">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> For a transparent mode iSCSI initiator, if both Fibre Channel zoning and iSCSI ACLs are used, then for 
every static iSCSI target that is accessible to the iSCSI host, the initiator’s virtual N port should be in 
the same Fibre Channel zone as the Fibre Channel target. 

</p>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
