Displays or modifies the selected access control record for a volume.
When you modify an access control record, the modification overwrites all existing requirements in the record. See the command examples.
Format
volume select vol_name access select n show|parameter ...
Variables
|
vol_name |
Name of a volume. |
|
n |
Identification number for an access control record, automatically generated when you create a record. Use the volume select access show command to display the identification numbers for a volume’s access control records. |
Parameters
|
apply-to type |
Specifies whether the record restricts access to the volume, its snapshots, or both the volume and its snapshots. The type variable can be volume, snapshot, or both. |
|
authmethod chap|none |
Specifies whether the record uses CHAP authentication (chap) to restrict access to the volume. You must also specify the username chap_name parameter to use CHAP authentication. |
|
initiator init_name |
Name of the iSCSI initiator to which access is restricted. For example: iqn.2000-05.com.qlogic.qla-4000.sn00044 |
|
IP address to which access is restricted. An asterisk (*) in any of the four parts of an IP address is interpreted as a wildcard character; that is, any value is accepted for that 8-bit field. For example, specify *.*.*.* for unrestricted host access (not recommended except for testing). |
|
|
username chap_name |
CHAP account name to which access is restricted. The name must match one of the local CHAP accounts or an account on an external RADIUS server. You must also specify the authmethod chap parameter to use CHAP authentication. See chapuser and grpparams cliaccess-ssh for information about configuring CHAP authentication in the group. |
Examples
The following command displays information about an access control record for volume dbvol:
> volume select dbvol access select 1 show
______________________ Access Information _______________________
Initiator: Ipaddress: 182.19.1.123
AuthMethod: chap UserName: tbase
Apply-To: both
The following command modifies the access control record in the previous example so that it includes only IP address 182.20.30.44:
> volume select dbvol access select 1 ipaddress 182.20.30.44