Table of ContentsView in Frames

Using RADIUS for iSCSI authentication

You can optionally use a RADIUS (Remote Authentication Dial-in User Service) server to centrally manage passwords for iSCSI authentication. Using RADIUS simplifies password management, increases security, and offloads authentication processing from Data ONTAP storage systems only.

Support for RADIUS is available starting with Data ONTAP 8.0 for the iSCSI target and the following versions of Windows Server, which include a RADIUS server.

You can configure either one-way authentication (the target authenticates the initiator), or mutual authentication (the initiator also authenticates the target).

There are three parts to enabling RADIUS authentication for iSCSI initiators:

For information about configuring this RADIUS server, see the Windows online Help.

For information about configuring the storage system to use RADIUS, see the SAN Administration Guide for your version of Data ONTAP.