volume select access select

Displays or modifies the selected access control record for a volume.

When you modify an access control record, the modification overwrites all existing requirements in the record. See the command examples.

Format

volume select vol_name access select n show|parameter ...

Variables

vol_name

Name of a volume.

n

Identification number for an access control record, automatically generated when you create a record.

Use the volume select access show command to display the identification numbers for a volume’s access control records.

Parameters

apply-to type

Specifies whether the record restricts access to the volume, its snapshots, or both the volume and its snapshots. The type variable can be volume, snapshot, or both.

authmethod chap|none

Specifies whether the record uses CHAP authentication (chap) to restrict access to the volume.

You must also specify the username chap_name parameter to use CHAP authentication.

initiator init_name

Name of the iSCSI initiator to which access is restricted. For example:

iqn.2000-05.com.qlogic.qla-4000.sn00044

ipaddress ip_address

IP address to which access is restricted. An asterisk (*) in any of the four parts of an IP address is interpreted as a wildcard character; that is, any value is accepted for that 8-bit field.

For example, specify *.*.*.* for unrestricted host access (not recommended except for testing).

username chap_name

CHAP account name to which access is restricted. The name must match one of the local CHAP accounts or an account on an external RADIUS server.

You must also specify the authmethod chap parameter to use CHAP authentication.

See chapuser and grpparams cliaccess-ssh for information about configuring CHAP authentication in the group.

Examples

The following command displays information about an access control record for volume dbvol:

> volume select dbvol access select 1 show

______________________ Access Information _______________________

Initiator:                             Ipaddress: 182.19.1.123

AuthMethod: chap                       UserName: tbase

Apply-To: both

The following command modifies the access control record in the previous example so that it includes only IP address 182.20.30.44:

> volume select dbvol access select 1 ipaddress 182.20.30.44