SANRAD I3.1.1205 - Manual (Page 134)

7-16 SANRAD V-Switch CLI User Manual
Creating an Identity
If you are working in
a V-Switch cluster,
each identity must be
configured on both V-
Switches.
If you are working
with an iSNS server,
all hosts are able to
see the target but
only those hosts with
access rights are
able to connect to the
target.
If you want to limit host, meaning iSCSI initiator, access to targets, you
must create an identity that is more discriminate than the default identity.
Use the CLI command acl identity create to name and describe an
identity.
When creating identities, keep in mind that:
ƒ Each identity can contain one or more iSCSI initiators.
ƒ Each identity can be assigned one or both login authentication
methods.
ƒ Each identity can be attached to more than one target.
ƒ Each target is first automatically coupled to a default read-write
un-authenticated access identity.
ƒ Each target can have more than one identity.
acl identity create
You need to define two parameters to create an identity:
S WITCH P ARAMETER D EFINITION S TATUS E XAMPLE
-alias ALIAS ALIAS FOR
I DENTITY
MANDATORY accounting
-info INFORMATION INFORMATION ON
I DENTITY
OPTIONAL accountants
allowed read-
write access
to accounting
records
Example
An identity, accounting, is created for those accountants allowed read-write
access to the accounting records, as shown in Figure 7-11.
acl identity create – alias accounting – info accountants
allowed read-write access to accounting records