NetWare iSCSI software includes management features that let you create or end iSCSI initiator/target sessions, view or edit initiator properties, monitor iSCSI status and connection information, and modify or disable iSCSI Target access control.
To create an iSCSI initiator/target session, follow the instructions in Section 2.5, Configuring iSCSI Initiators.
You can end an iSCSI target session at the initiator server console or by using Novell Remote Manager.
To end an iSCSI target session at the initiator server console, enter iscsinit disconnect a.b.c.d
Replace a.b.c.d with the IP address of the iSCSI target device.
Using the iscsinit disconnect command will disconnect or end all iSCSI target sessions for the specified IP address. If you want to end an iSCSI target session for a specific target, use Novell Remote Manager.
If you have NetWare 6.5 Support Pack 3 (SP 3) or later installed, you can specify the target name to disconnect from a specific target. In this case, you would enter iscsinit disconnect a.b.c.d target_name.
Replace target_name with the iSCSI target name that is displayed after running the iscsinit discover a.b.c.dcommand. The iSCSI target name is case sensitive. With NetWare 6.5 SP 3, you can also leave the target name out to cause the initiator to disconnect from all available targets at the specified IP address.
To end an iSCSI target session using Novell Remote Manager:
On the Novell Remote Manager main page, click the iSCSI Services link at the bottom of the left column.
Click End Session.
Check the check box next to each target you want to disconnect from this initiator, then click Next to disconnect them.
The same procedure for ending a session using Novell Remote Manager can also be used from the target.
You can view iSCSI initiator properties at the initiator server console or by using Novell Remote Manager. To change iSCSI initiator and driver properties, you must use Novell Remote Manager.
To view iSCSI initiator properties at the initiator server console, enter iscsinit info.
To view or change iSCSI initiator properties using Novell Remote Manager:
On the Novell Remote Manager main page, click the iSCSI Services link at the bottom of the left column.
Click the Properties link to bring up a page that lets you view or change initiator and driver properties.
View or change the desired properties, then click Finish to save changes.
Current initiator and driver properties include the following:
Authentication Method
Frontpage Display Controls
Connection Path Recovery Controls
Number of LUN Probes per Target
Display Driver Statistics
Performance and Trend Graphs
Reports
The default authentication method is None. This property cannot be changed or deselected for this release.
The Frontpage Display Controls check boxes determine what information is displayed on the iSCSI initiator main page. Checking a check box causes that information to be displayed. For example, if you check the Network Address check box, the IP address of the target device will be displayed in the Storage Sessions section of the iSCSI initiator main page.
The Connection path recovery controls are tolerance and timeout configuration settings for communication between initiators and targets. You can enable or disable Connection path recovery controls. These controls are configured to default settings, and should not be changed except under the direction of Novell Technical Support.
The number of LUN probes per target is the number of targets you want the initiator to communicate with on the target device.
NOTE:If the iSCSI target is a NetWare server, only one LUN per target is supported. Adjusting the number of LUN probes per target only applies to third-party iscsi targets (Cisco, NetApp, etc.).
Checking the Display Driver (HAM) Statistics check box causes operational statistics to be displayed on the iSCSI initiator main page. There will also be link on the main page to an iSCSI Device Driver Requests graph.
If you check the Performance and Trend Graphs check box, there will be links to informative graphs for Data Transfer Rate and Trend Distribution on the iSCSI initiator main page.
If you check the Reports check box, there will be buttons to view or e-mail the iSCSI report on the iSCSI initiator main page. The iSCSI report contains statistics for iSCSI files and functions.
You can view iSCSI target properties by using Novell Remote Manager.
On the Novell Remote Manager main screen, click the iSCSI Services link at the bottom of the left column.
Click the Properties link to bring up a page that lets you choose which target properties you want displayed on the iSCSI target main page.
Current driver properties include the following:
Frontpage Display Controls
Performance and Trend Graphs
Reports
The Frontpage Display Controls check boxes determine what information is displayed on the iSCSI target main page. Checking a check box causes that information to be displayed. For example, if you check the Initiator Network Address check box, the IP address of initiators with active sessions will be displayed in the Storage Sessions section of the iSCSI target main page.
If you check the Performance and Trend Graphs check box, there will be links to informative graphs for Data Transfer Rate and Trend Distribution on the iSCSI target main page.
If you check the Reports check box, there will be buttons to view or e-mail the iSCSI report on the iSCSI target main page. The iSCSI report contains statistics for iSCSI files and functions.
You can view general iSCSI target status information and active session information at the target server console or by using Novell Remote Manager.
To view iSCSI target status and active session information at the target server console, enter iscsitar sessions.
To view iSCSI target status and active session information using Novell Remote Manager:
After logging in to an initiator with an active iSCSI session using Novell Remote Manager, click the iSCSI Services link at the bottom of the left column to bring up the iSCSI initiator main page.
Click the Status button to bring up a page that displays general target status information.
If there are no active iSCSI target session, no Status buttons or storage sessions are displayed.
On the page that appears after clicking the Status button, click a connection number to get more detailed information on the status of that connection.
You can view general iSCSI initiator status information and active session information at the initiator server console or by using Novell Remote Manager.
To view iSCSI target status and active session information at the initiator server console, enter iscsinit status.
To view iSCSI target status and active session information using Novell Remote Manager:
After logging in to a target with an active iSCSI session using Novell Remote Manager, click the iSCSI Services link at the bottom of the left column to bring up the iSCSI target main page.
Click the Status button to bring up a page that displays general initiator status information.
If there are no active iSCSI sessions, no Status buttons are displayed.
You can modify, disable, or remove iSCSI target access control after it has been configured. If you disabled or removed access control, you can also re-enable it or add it again.
The only modification you can currently make to iSCSI target access control after it has been configured, other than disabling or removing it, is to change the iSCSI administrator password.
This password is encrypted and stored in a secret store. The iSCSI target server administrator password by default is set to be the same as the eDirectory administrator password. Changing this password does not automatically change the eDirectory administrator password. Likewise, changing the eDirectory administrator password does not automatically change this password. Both passwords must currently be managed separately.
You can change the LDAP DN that the iSCSI target server administrator uses to match passwords with from the eDirectory administrator default to another user object by removing and reading iSCSI target access control. If you change the LDAP DN, that user object must have administrative rights to the iSCSI objects. See Disabling or Removing iSCSI Target Access Control for more information.
The iSCSI target server administrator password must be the same as the specified eDirectory user (default is eDirectory administrator) with administrative rights to the iSCSI objects. If they are different, iSCSI partitions on the target server will not be accessible to initiators. If the password changes for the eDirectory user with administrative rights to the iSCSI objects, you must use this option to change the iSCSI target administrator password to match.
To change the iSCSI administrator password:
Log in to the iSCSI target using Novell Remote Manager and click the iSCSI Services link at the bottom of the left column to bring up the iSCSI target main page.
Click the LDAP link and enter the old password and the new one.
You can disable or completely remove iSCSI access control capability on the iSCSI target. If you disable or remove iSCSI target access control, any initiator on the same network will be able to connect to the iSCSI target.
To disable or remove iSCSI target access control:
Log in to the iSCSI target using Novell Remote Manager and click the iSCSI Services link at the bottom of the left column to bring up the iSCSI target main page.
Click the LDAP link, then click the radio button to either disable LDAP configuration or remove LDAP configuration.
Removing LDAP configuration deletes the secret store where the iSCSI administrator password is encrypted and stored.
After clicking the Next button, unload and reload iSCSI target server software to cause the changes to take effect.
You can do this by entering TOFF at the target server console to unload iSCSI target software and then entering TON at the target server console to load iSCSI target software.
LDAP access control can be enabled or added by clicking LDAP on the main iSCSI target page and entering the necessary information in the fields provided.
If you have disabled or removed iSCSI target access control, you can easily re-enable it or add it again using Novell Remote Manager. If you removed iSCSI target access control, adding it again re-creates the secret store that was deleted when you removed access control.
To re-enable or add iSCSI target access control:
Log in to the iSCSI target using Novell Remote Manager and click the iSCSI Services link at the bottom of the left column to bring up the iSCSI target main page.
Click the LDAP link, then ensure that the Service DN and Login DN fields are correct.
Service DN is the LDAP distinguished name of the server running iSCSI target software. The LDAP distinguished name of the iSCSI target server is automatically added to the field.
Login DN is the LDAP distinguished name of the eDirectory administrator account. You can leave the default or enter the distinguished name of another eDirectory user with administrative rights to the iSCSI objects.
Enter the administrator password for the Login DN and confirm the password is correct by adding it again.
After clicking the Next button, unload and reload iSCSI target server software to cause the changes to take effect.
You can do this by entering TOFF at the target server console to unload iSCSI target software and then entering TON at the target server console to load iSCSI target software.