<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:48:06" />
    <title>Configuring Mutual CHAP Authentication </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1981;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1077903"> </a><h1 class="pTitle">
Configuring Mutual CHAP Authentication

</h1>
<a name="wp1077904"> </a><p class="pBody">
The IPS module or MPS-14/2 module supports a mechanism by which the iSCSI initiator can 
authenticate the Cisco MDS switch’s iSCSI target during the iSCSI login phase. This authentication is 
available in addition to the IPS module or MPS-14/2 module authentication of the iSCSI initiator.

</p>
<a name="wp1077906"> </a><p class="pBody">
In addition to the IPS module or MPS-14/2 module authentication of the iSCSI initiator, the IPS module 
or MPS-14/2 module also supports a mechanism for the iSCSI initiator to authenticate the Cisco MDS 
switch’s iSCSI target during the iSCSI login phase. This authentication requires the user to configure a 
user name and password for the switch to present to the iSCSI initiator. The provided password is used 
to calculate a CHAP response to a CHAP challenge sent to the IPS port by the initiator.

</p>
<a name="wp1119932"> </a><h2 class="pHeading2">
Detailed Steps
</h2>
<a name="wp1333722"> </a><p class="pBody">
To configure a global iSCSI target user name and password to be used by the switch to authenticate itself 
to an initiator, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1333723"> </a><li class="pSmartList1">Choose<span style="font-weight: bold"> FC Interfaces &gt; Logical &gt; </span><b class="cBold">iSCSI </b>in the Physical Attributes pane. 
</li>
<a name="wp1333724"> </a><p class="pListBodyLevel1">
You see the iSCSI tables in the Information pane. 

</p>
<a name="wp1333725"> </a><li class="pSmartList1">Select the <b class="cBold">Globals</b> tab. 
</li>
<a name="wp1333726"> </a><p class="pListBodyLevel1">
You see the global iSCSI configuration.

</p>
<a name="wp1333727"> </a><li class="pSmartList1">Fill in the Target UserName and Target Password fields.
</li>
<a name="wp1333728"> </a><li class="pSmartList1">Click the <b class="cBold">Apply Changes</b> icon to save these changes.
</li>
</ol></div>
<a name="wp1333775"> </a><p class="pBody">
To configure a per-initiator iSCSI target’s user name and password used by the switch to authenticate 
itself to an initiator using Device Manager, follow these steps:

</p>
<div class="pSmartList1"><ol type="1" class="pSmartList1">
<a name="wp1333776"> </a><li class="pSmartList1">Choose<span style="font-weight: bold"> IP &gt; iSCSI</span>.
</li>
<a name="wp1333777"> </a><p class="pListBodyLevel1">
You see the iSCSI configuration. 

</p>
<a name="wp1333778"> </a><li class="pSmartList1">Complete the Target UserName and Target Password fields for the initiator that you want to configure.
</li>
<a name="wp1333779"> </a><li class="pSmartList1">Click <b class="cBold">Create</b> to add this initiator to the Initiator Access List.
</li>
</ol></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
