Managing Devices in Oracle^® Solaris 11.4

How to Configure a RADIUS Server for an iSCSI Target

This procedure assumes that you are logged in to the local system to securely access the configured iSCSI target device.

1. Become an administrator.

   For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.

2. Configure the initiator node with the IP address and the port of the RADIUS server.

   The default port is 1812. This configuration is completed once for all iSCSI targets on the target system.

   initiator# itadm modify-defaults -r RADIUS-server-IP-address
   Enter RADIUS secret: ************
   Re-enter secret: ************

3. Configure the shared secret key that is used for communication between the target system and the RADIUS server.

   initiator# itadm modify-defaults -d
   Enter RADIUS secret: ************
   Re-enter secret: ************

4. Configure the target system to require RADIUS authentication.

   This configuration can be performed for an individual target or as a default for all targets.

   initiator# itadm modify-target -a radius target-iqn

5. Configure the RADIUS server with the following information:

   • The identity of the target node (for example, its IP address)

   • The shared secret key that the target node uses to communicate with the RADIUS server

   • The initiator's CHAP name (for example, initiator's iqn name) and the secret key for each initiator that needs to be authenticated