
LUN Configuration and Security Manager XP user guide for the XP128/XP1024 55
Table 15 shows the relationship between the combinations of port settings and the connection results.
Irrespective of whether a host is configured for port authentication using CHAP, the connection results are
as follows, unless otherwise noted.
.
For additional information on user authentication, see ”User authentication (iSCSI environments only)” on
page 25.
Operational restrictions
The success of some LUN Manager activities depends on the status of the security switch and whether I/O
is active or inactive to the port or LUN. The following tables describe those restrictions.
NOTE:
• If you attempt to apply a large number of the settings in the LUN Manager panels in a single session,
the XP128/XP1024 might be unable to continue processing. It is recommended that you apply no
more than 1,000 settings per session. Note that a large number of settings are likely to be applied
when you define alternate paths (see ”Defining alternate paths” on page 41), even though only two
commands are required to define alternate paths.
• Do not remove LU paths (see ”Changing or viewing LU path settings” on page 37) when the hosts are
performing I/O processing.
• Do not remove LUN security (see ”Applying and removing LUN security” on page 44) when the hosts
are performing I/O processing.
Restrictions on LUN Manager operations
Table 15 Combinations of iSCSI port settings and connection results
Port settings Connection results
Authentication:
at port
User information
registered on host?
Enable
authentication
ON Yes Selected
Connected if the host authentication was
successful (processing will continue to port
authentication)
1
1. If a host is not configured for port authentication using CHAP, the host cannot connect to the disk array.
ON Yes Not selected Connected without host authentication
ON No —
2
2. ---: This item does not affect the connection results, or cannot be specified.
Authentication failed to be authenticated and
cannot be connected
OFF — —
Connected without host authenticati
on
3
3. If a host uses Microsoft iSCSI Initiator and is configured for port authentication using CHAP, host authentication will fail. To allow
such a host to connect to the port without authentication, do not configure it for CHAP port authentication.
Table 16 LUN Manager operation restrictions
Activity Security switch OFF Security switch ON
Host group 0 Host group
01-7F
Host group 0 Host group
01-7F
Setting the LUN
Security Switch
ON
With active I/O
on port
Permitted with
confirmation
message
Invalid operation Invalid operation
With no active
I/O on port
Komentáře k této Příručce