> # Restricting iSCSI Initiator Authentication

> By default, the iSCSI initiator can use any user name in the RADIUS server or in the local database in authenticating itself to the IPS module or MPS-14/2 module (the CHAP user name is independent of the iSCSI initiator name). The IPS module or MPS-14/2 module allows the initiator to log in as long as it provides a correct response to the CHAP challenge sent by the switch. This can be a problem if one CHAP user name and password has been compromised.

> ## Detailed Steps

> To restrict an initiator to use a specific user name for CHAP authentication, follow these steps:

> 1. Choose End Devices > iSCSI in the Physical Attributes pane.

> You see the iSCSI tables in the Information pane.

> 2. Right-click the AuthUser field and enter the user name to which you want to restrict the iSCSI initiator.
> 3. Click the Apply Changes icon to save these changes.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.