vSphere Storage Appliance

 View Only
Expand all | Collapse all

Software iSCSI Issues

  • 1.  Software iSCSI Issues

    Posted Aug 04, 2010 06:40 PM

    I have configured my Clariion CX3 for iSCSI. It is setup to use CHAP as well as require initiator authentication.

    My vCenter is 4.0 update 1 but the ESX hosts I am trying to configure for iSCSI are 3.5 u5.

    I setup another vmKernel to be used for iSCSI. I click on properties, enable iSCSI, click on Dynamic Discovery and enter the two IP addresses for my CX3.

    When I click on the CHAP button back on the General tab and select "Use CHAP", then check the "Use initiator name" check box. I then enter the CHAP secret I entered on my CX3.

    Then I get a popup saying "Failed to update Authentication properties".

    Thoughts?



  • 2.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 06:52 PM

    Does it work if you disable the CHAP? Trying to determine if it's a CHAP specific issue or maybe some type of connectivity issue.






    If you found this or any other post helpful please consider the use of the Helpful/Correct buttons to award points



  • 3.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 07:01 PM

    I'll try that out.



  • 4.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 07:17 PM

    Same error from vCenter. I did it with and without CHAP from a Windows host and it worked just fine.



  • 5.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 07:19 PM

    What does your setup look like? In 3.5 if your service console needs to be able to access the iSCSI network so if your running a non routable iSCSI setup then you would need a service console on the iSCSI network too. Can you use vmkping from the service console and ping the iSCSI target?






    If you found this or any other post helpful please consider the use of the Helpful/Correct buttons to award points



  • 6.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 07:25 PM

    Just rebooted my host. In the mean time, if I used a VM's iSCSI initiator, do I need to install PowerPath since the VM sees the LUN twice?



  • 7.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 07:50 PM

    Well my iSCSI VMKernel port could not ping via vmkping. I left the vlan off.

    I have since changed it and am able to to ping but still get that authentication error.



  • 8.  RE: Software iSCSI Issues

    Posted Aug 04, 2010 08:43 PM

    I don't deal with CHAP but I find it odd that you continue to still get the authentication error even with CHAP disabled. With it disabled there should not be any type of authentication.






    If you found this or any other post helpful please consider the use of the Helpful/Correct buttons to award points



  • 9.  RE: Software iSCSI Issues
    Best Answer

    Posted Aug 04, 2010 08:47 PM

    If you enabled two way authentication make sure you disable CHAP on both ends.



  • 10.  RE: Software iSCSI Issues

    Posted Aug 05, 2010 05:12 AM

    Well my iSCSI VMKernel port could not ping via vmkping. I left the vlan off.

    I have since changed it and am able to to ping but still get that authentication error.

    So you're using the ESX initiator at this point, and not an iSCSI initiator in the guest, right?

    Do you have an older version of Virtual Center that you can try to see if that works? If not, can you dis-associate the host from vCenter and try configuring CHAP using the VI Client, only, without going through vCenter?

    Alternatively, do you want to try to configure CHAP credentials through the command line on the ESX host to see if you can get connectivity?

    vmkiscsi-tool provides that capability, if you'd like to try.

    This potentially sounds like a gap between the newer vCenter and the older ESX installation, unrelated to the type of storage installed.

    Andy



  • 11.  RE: Software iSCSI Issues

    Posted Aug 05, 2010 05:37 AM

    Chap works on CX.

    But you have to configure the iSCSI interfaces of the storage processors (I suppose that are fine) and then check also that the hosts is listed in the hosts tabs of the NaviSphere.

    At this point you can create it's storage group or add to an existing storage group.

    Andre



  • 12.  RE: Software iSCSI Issues

    Posted Aug 05, 2010 01:08 PM

    Thanks everyone. I think I have it working correctly now. I had to setup the hosts first to see the cx3. Once that happened I was able to see the iSCSI initiators of my hosts in Navisphere. I was able to add them to the CHAP authentication page. All looks to be good.



  • 13.  RE: Software iSCSI Issues

    Posted Aug 05, 2010 03:25 PM

    I guess I spoke too soon. Only two out of my 3 hosts are able to log in using the CHAP credentials...