Creates an access control record for a volume, its snapshots, or both.
A host must match all the requirements specified in one access control record to gain access. In each record, you can specify one or more of the following:
Notes: If using IP addresses or iSCSI initiator names to restrict access to a volume, be sure to create an access control record for each IP address or iSCSI initiator name presented by an authorized host.
If you are using CHAP, you can enable or disable (default) functionality that prevents unauthorized hosts from discovering targets (volumes) that are only authenticated with CHAP. See grpparams discovery-use-chap for more information.
When you create an access control record, the record is automatically assigned an identification number. Use this number to manage the record with the CLI.
Format
volume select vol_name access create parameter ...
Variable
|
vol_name |
Name of a volume. |
Parameters
|
apply-to type |
Specifies whether the record restricts access to the volume, its snapshots, or both the volume and its snapshots (default). The type variable can be volume, snapshot, or both. |
|
authmethod chap|none |
Specifies whether the record uses CHAP authentication (chap) to restrict access to the volume. The default is none; CHAP authentication is not used. You must also specify the username chap_name parameter for CHAP authentication. |
|
initiator name |
Name of the iSCSI initiator to which access is restricted. For example: iqn.2000-05.com.qlogic.qla-4000.sn00044 |
|
ipaddress ip_address |
IP address to which access is restricted. An asterisk (*) in any of the four parts of an IP address is interpreted as a wildcard character; that is, any value is accepted for that 8-bit field. For example, specify *.*.*.* for unrestricted host access (not recommended except for testing). |
|
username chap_name |
CHAP account name to which access is restricted. The name must match one of the local CHAP accounts or an account on an external RADIUS server. You must also specify the authmethod chap parameter for CHAP authentication. |
Example
The following command creates an access control record that restricts volume access to a host with IP address 123.13.3.44:
> volume select dbvol access create ipaddress 123.13.3.44
Created access entry with ID 2.