Host and host group authentication
When a host attempts to connect to the storage system, the connection results of the authentication
of the host differ depending on the host group settings.
The following diagram illustrates the flow of authentication of hosts in a fibre channel environment.
The connection uses cases are detailed below the diagram.
Authenticating hosts (Cases A, B, and C)
The following cases describe the examples of performing authentication of host groups
Case A - The user information of the host is registered on the host group, and authentication of the
host is enabled.
The host group authenticates the user information sent from the host. If authentication of the host
is successful, either of the following occurs:
•
When the host is configured for mutual authentication, authentication of the host group is
performed.
•
When the host is not configured for mutual authentication, the host connects to the storage
system.
If the host is not configured for authentication by host groups with CHAP, the authentication fails
and the host cannot connect to the storage system.
Case B - The user information of the host is registered on the host group, but authentication of the
host is disabled.
The host group does not perform authentication of the host. The host will connect to the storage
system without authentication regardless of whether the host is configured for authentication by
host groups with CHAP.
Case C - The user information of the host is not registered on the host group.
188 Managing logical volumes