iscsi ‑modify

Changes the iSCSI settings globally or for a port.

SYNOPSIS

iscsi ‑modify 
   { ‑controller controller‑id‑or‑fqn
     ‑port hba‑slot‑number/port‑number
     [‑tcpPort port‑number]
     [‑mtu mtu]
     [{‑dhcp | ‑noDhcp}]
     [‑ip ip‑address]
     [‑netmask netmask]
     [‑gateway gateway‑ip]
     [{‑enableVlan | ‑disableVlan}]
     [‑vlanId vlan‑id‑number]
   |
     [‑accessControl {isns | oracleFS | none}]
     [‑alias alias‑name]
     [‑authentication {allInitiators | perInitiator}]
     [‑authenticationServer {oracleFS | radius}]
     [{‑headerDigest | ‑noHeaderDigest}]
     [{‑dataDigest | ‑noDataDigest}]
     [{‑biDirectionalChap | ‑noBiDirectionalChap}]
     [‑chapSecret]
     [{‑isnsRegistration | ‑noIsnsRegistration}]
     [‑isnsDiscovery {dhcp | static}]
     [‑isnsServerIp ip‑address]
     [‑isnsTcpPort port‑number]
     [‑radiusIp ip‑address]
     [‑radiusUdpPort udp‑port]
     [‑radiusSecret]
     [‑secondaryRadiusIp ip‑address]
     [‑secondaryRadiusUdpPort udp‑port]
     [‑secondaryRadiusSecret]
   }

   [{‑sessionKey | ‑u admin‑user ‑oracleFS oracle‑fs‑system}]
   [{‑outputformat | ‑o} { text | xml }]
   [{‑timeout timeout‑in‑seconds | ‑verify | ‑usage | ‑example | ‑help}]

DESCRIPTION

The iscsi ‑modify command changes the Internet Small Computer System Interface (iSCSI) settings for the entire Oracle FS System or for a particular Controller port.

Note: Only administrators with primary administrator or admin1 roles are authorized to run the iscsi ‑modify command.

OPTIONS

‑accessControl

Specifies the access control method for iSCSI initiators.

none: Allows all iSCSI initiators to login.
isns: Disallows all iSCSI login attempts from initiators that have not been granted access by the Internet Storage Name Service (iSNS) server.
oracleFS: Disallows all iSCSI login attempts from initiators that have not been given the appropriate CHAP credentials through Oracle FS System Manager (GUI) or through the sanhost ‑add command or the sanhost ‑modify command.

‑alias

Specifies the name or the description of the Oracle FS System as an iSCSI target.

‑authentication

Specifies how iSCSI authentication is performed. Valid operands:

perinitiator: Indicates that the Oracle FS System does not always negotiate for Challenge-Handshake Authentication Protocol (CHAP) authentication during a login operation, but the initiator might require authentication.
allinitiators: Indicates that the Oracle FS System requires CHAP authentication of initiators for all login operations.

‑authenticationServer

Specifies whether the Oracle FS System or a Remote Authentication Dial In User Service (RADIUS) server performs the authentication.

‑biDirectionalChap

Directs the Oracle FS System to require that the iSCSI initiator provide the Challenge-Handshake Authentication Protocol (CHAP) secret that is stored within the Oracle FS System when the initiator performs an iSCSI login.

Regardless of whether this option is provided, the iSCSI initiator must provide its CHAP secret.

‑chapSecret

Specifies the Challenge-Handshake Authentication Protocol (CHAP) security key to use for authenticating iSCSI login operations. The Oracle FS System prompts for the key to use.

‑controller

Specifies the fully qualified name (FQN) or the unique identifier (ID) of a Controller.

‑dataDigest

Directs the Oracle FS System to negotiate for iSCSI data digests during the session login operation for all initiators.

‑dhcp

Specifies that Dynamic Host Configuration Protocol (DHCP) is enabled for the specified Controller port.

‑disableVlan

Removes support for VLAN tagging from the iSCSI port.

‑enableVlan

Adds support for VLAN tagging on the iSCSI port.

‑gateway

Assigns the IP address of the gateway network node in the subnetwork of which the Oracle FS System (the Pilot) is a member. If the port is configured for DHCP, this option returns an error.

‑headerDigest

Directs the Oracle FS System to negotiate for iSCSI header digests during the session login operation for all initiators.

‑ip

Identifies the IP address of a network device. For the iSCSI port, this address is a static address. If the port is configured to use DHCP, this option returns an error.

‑isnsDiscovery

Instructs the Oracle FS System how to discover the iSNS server.

Valid arguments to specify the discovery method:

dhcp: Directs the system to use DHCP to discover an iSNS server.
static: Directs the system to use the IP address that is defined by the values for the ‑isnsServerIp option and the ‑isnsTcpPort option.

‑isnsRegistration

Directs the Oracle FS System to register with an iSNS server. The system queries the iSNS server for the list of iSCSI initiators that are permitted to login to the Oracle FS System.

‑isnsServerIp

Identifies the IP address of the iSNS server that the Oracle FS System uses to authenticate the iSCSI login credentials.

‑isnsTcpPort

Identifies the TCP port number that the Oracle FS System uses when accessing the iSNS server.

‑mtu

Identifies the number of bytes to use for the maximum transmission unit (MTU).

This MTU setting applies to the specified Controller port.

‑netmask

Identifies a subnetwork mask for the range of IP addresses that is associated with the destination of the iSCSI port. If the port has been configured to use DHCP, this option returns an error.

‑noBiDirectionalChap

Directs the Oracle FS System not to require that the iSCSI initiator provide the CHAP secret that is stored within the Oracle FS System when the initiator performs an iSCSI login.

Regardless whether this option is provided, the iSCSI initiator must provide its CHAP secret.

‑noDataDigest

Directs the Oracle FS System not to negotiate for iSCSI data digests during the session login operation for all initiators.

‑noDhcp

Specifies that Dynamic Host Configuration Protocol (DHCP) is disabled for the specified Controller port.

‑noHeaderDigest

Directs the Oracle FS System not to negotiate for iSCSI header digests during the session login operation for all initiators.

‑noIsnsRegistration

Directs the Oracle FS System not to register with an iSNS server and not to use the iSNS services.

‑port

Identifies a specific port on a Controller HBA.

Specify the port using the form HBA slot number/port number. Specify the arguments in the following manner:

HBA slot number: Specifies the PCIE slot number of the HBA on which the port is located. The slot number must be 0 or greater.
port number: Identifies the port number on the HBA slot. The port number must be 0 or greater.

‑radiusIp

Identifies the IP address of the primary RADIUS server that the Oracle FS System uses to validate the iSCSI login credentials. This option is active only when radius is specified for the ‑authenticationServer option.

‑radiusSecret

Specifies the password (secret) that the Oracle FS System uses when accessing the primary RADIUS server. The system prompts for the RADIUS secret when this option is included on the command line.

‑radiusUdpPort

Identifies the UDP port number that the Oracle FS System uses to validate the iSCSI login credentials on the primary RADIUS server. This option is active only when radius is specified for the ‑authenticationServer option.

‑secondaryRadiusIp

Identifies the IP address of the secondary RADIUS server that the Oracle FS System uses to validate the iSCSI login credentials. This option is active only when radius is specified for the ‑authenticationServer option.

‑secondaryRadiusSecret

Specifies the password (secret) that the Oracle FS System uses when accessing the secondary RADIUS server. The system prompts for the RADIUS secret when this option is included on the command line.

‑secondaryRadiusUdpPort

Identifies the UDP port number that the Oracle FS System uses to validate the iSCSI login credentials on the secondary RADIUS server. This option is active only when radius is specified for the ‑authenticationServer option.

‑tcpPort

Identifies the TCP port number to use for the specified iSCSI port.

‑vlanId

Sets the virtual LAN identifier for the iSCSI port.

EXAMPLE

Task

Change the access control method for iSCSI initiators.

Parameters

The access control method for iSCSI initiators: oracleFS

$ fscli iscsi ‑modify ‑accessControl oracleFS