Creating Access Control Records

To create an access control record, click:

Volumes > volume_name > Access tab

The Volume Access window appears (Figure 16: Volume Access ), displaying the access control records for the volume and its snapshots.

Figure 16: Volume Access

In the Access Control List panel, click Add. The Add Access Control Record dialog box appears (Figure 17: Add Access Control Record ).

Figure 17: Add Access Control Record

For unrestricted access (not recommended), do not select any access methods.

To restrict access, select the access method and specify the required information:

• Authenticate using CHAP user name – Restricts access to hosts that supply the specified CHAP user name (and its associated password or "secret"). The user name must match a local CHAP account or an account on an external RADIUS server, as described in Using CHAP to Control iSCSI Access to Volumes.
• Limit access by IP address – Restricts access to hosts with the specified initiator IP address (for example, 12.16.22.123). Use asterisks for "wildcards," if desired (for example, 12.16.*.*). An asterisk can replace an entire octet, but not a digit within an octet.
• Limit access to iSCSI initiator name – Restricts access to hosts with the specified iSCSI initiator.

Note: If using IP addresses or iSCSI initiator names to restrict access, be sure to create an access control record for each IP address or iSCSI initiator name presented by an authorized host.

In addition, select whether you want the access control record to apply to the volume, its snapshots, or both (the default).

After entering the access control information, click OK to create the record.