Main menu

VSICM51 - Slide 06-24 - iSCSI Security: CHAP



1. Wrong:

When listing CHAP authentication methods, slide notes state:

Bidirectional – Also called mutual CHAP. Available only with software iSCSI.

Additionally, when describing per-target CHAP authentication, slide notes state:

For software iSCSI, ESXi also supports per-target CHAP authentication.

Similar statements are also shown on the slide graphics.

1. Correct:

Bidirectional and per-target authentication are available for both software iSCSI and dependent hardware iSCSI initiators.

1. Info:

In the "vSphere Storage" guide - "Configuring iSCSI Adapters and Storage" chapter - "Configuring CHAP Parameters for iSCSI Adapters" paragraph - "Choosing CHAP Authentication Method" section you read:

For software and dependent hardware iSCSI adapters, you can set unidirectional CHAP and bidirectional CHAP for each adapter or at the target level. Independent hardware iSCSI supports CHAP only at the adapter level.
1. Source:

vSphere 5.1 Documentation Center.



2. Wrong:

When describing how to configure CHAP on the ESXi host at the adapter level, slide notes also state that "Do not use CHAP unless required by target" and "Use CHAP" options are available for the "iSCSI software initiator only".

2. Correct:
  • "Do not use CHAP unless required by target" is available for:
    • Software iSCSI
    • Dependent hardware iSCSI
  • "Use CHAP" unidirectional is available for:
    • Software iSCSI
    • Dependent hardware iSCSI
    • Independent hardware iSCSI
  • "Use CHAP" bidirectional is available for:
    • Software iSCSI
    • Dependent hardware iSCSI
2. Info:

In the "vSphere Storage" guide - "Configuring iSCSI Adapters and Storage" chapter - "Configuring CHAP Parameters for iSCSI Adapters" paragraph - "Choosing CHAP Authentication Method" there is a table recapping CHAP Security Levels supported by the various iSCSI initiators.

Source:

vSphere 5.1 Documentation Center.


Last modified onThursday, 12 December 2013 19:25
Rate this item
(1 Vote)
back to top