SANRAD V-Switch Switch User Manual


 
120 SANRAD V-Switch User Manual
Creating an Identity
If you are working in
a V-Switch cluster,
each identity must be
configured on both V-
Switches.
If you are working
with an iSNS server,
all hosts are able to
see the target but
only those hosts with
access rights are
able to connect to the
target.
If you want to limit host, meaning iSCSI initiator, access to targets, you
must create an identity that is more discriminate than the default identity.
Use the CLI command acl identity create to name and describe an
identity.
When creating identities, keep in mind that:
Each identity can contain one or more iSCSI initiators.
Each identity can be assigned one or both login authentication
methods.
Each identity can be attached to more than one target.
Each target is first automatically coupled to a default read-write
un-authenticated access identity.
Each target can have more than one identity.
acl identity create
You need to define two parameters to create an identity:
SWITCH PARAMETER DEFINITION STATUS EXAMPLE
-alias
ALIAS ALIAS FOR
IDENTITY
MANDATORY
accounting
-info
INFORMATION INFORMATION ON
IDENTITY
OPTIONAL
accountants
allowed read-
write access
to accounting
records
Example
An identity, accounting, is created for those accountants allowed read-write
access to the accounting records, as shown in Figure 63, page 121.
acl identity create – alias accounting – info
accountants allowed read-write access to accounting
records