Hp StorageWorks IP Storage Router Manual de usuario descargar pdf (Pagina 147)

Configuring Authentication

147IP Storage Router SR2122-2 User Guide

This chapter describes how to configure the following AAA security services:

■ RADIUS is a distributed client/server system implemented through AAA that

secures networks against unauthorized access. In this implementation, the

storage router sends authentication requests to a central RADIUS server that

contains all user authentication and network service access information.

■ TACACS+ is a security application implemented through AAA that provides

centralized validation of users attempting to gain access to storage targets

through specified SCSI routing instances. TACACS+ services are maintained

in a database on a TACACS+ daemon running, typically, on a UNIX or

Windows NT workstation. TACACS+ provides for separate and modular

authentication, authorization, and accounting facilities.

■ Local or local-case uses a local username database on the storage router for

authentication. Local-case indicates that the user name authentication is

case-sensitive. Password authentication is always case-sensitive.

Configuration Tasks

To configure iSCSI authentication and the associated AAA authentication services

on the storage router:

1. Configure the desired security services, such as RADIUS, TACACS+, or the

local username database.

2. Build the AAA authentication list.

3. Test the iSCSI authentication services.

4. Enable iSCSI authentication for individual SCSI routing instances.

5. Verify and save AAA and iSCSI authentication configuration.

Figure 50 illustrates AAA authentication configuration elements and Figure 51

illustrates the example configuration of iSCSI authentication and AAA

authentication services used in this chapter.

1 2 ... 142 143 144 145 146 147 148 149 150 151 152 ... 241 242

Sin comentarios

Hp StorageWorks IP Storage Router Manual de usuario Pagina 147