|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Selectively exposing Porgal Groups to Initiators
Hi,
1. Is it required that TargetAddresses of an iSCSI target advertised to a
directory service include portal group tag ?
2. Is it mandatory for an Initiator to use "SendTargets" to discover
TargetAddress for an iSCSI target (even if if has a set of addresses
either
statically configured or found through a directory service)?
3. Is it okay to restrict access to an Initiator (based on it's iSCSI name)
to
only a subset of total Target Portal Groups supported by the iSCSI
target?
In this scenario, an Initiator may find out the TargetAddresses for an iSCSI
target using a directory service, and try to connect a normal operational
session
to any of these addresses without using SendTargets. The iSCSI target can
return an error code for login as "Initiator not Authorized" which in fact
is not
completely true. Initiator is authorized to only use a subset of portal
groups.
Regards,
Rahul
Home Last updated: Wed Nov 21 15:18:01 2001 7875 messages in chronological order |