Linux 环境下iSCSI Target 与 Initiator 配置

Target端配置

1.安装并启动targetcli

$ sudo dnf install targetcli$ sudo systemctl start target.service$ sudo systemctl enable target.service$ sudo targetclitargetcli shell version 2.1.fb46Copyright 2011-2013 by Datera, Inc and others.For help on commands, type 'help'./> lso- / ............................................................................ [...]  o- backstores ................................................................. [...]  | o- block ..................................................... [Storage Objects: 0]  | o- fileio .................................................... [Storage Objects: 0]  | o- pscsi ..................................................... [Storage Objects: 0]  | o- ramdisk ................................................... [Storage Objects: 0]  o- iscsi ............................................................... [Targets: 0]  o- loopback ............................................................ [Targets: 0]  o- vhost ............................................................... [Targets: 0]

2.创建iSCSI块设备

/> cd backstores//backstores> cd block /backstores/block> create block01 /dev/sdbCreated block storage object block01 using /dev/sdb.

3.创建LIO iSCSI目标

/> cd iscsi /iscsi> createCreated target iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8.Created TPG 1.Global pref auto_add_default_portal=trueCreated default portal listening on all IPs (0.0.0.0), port 3260.

4.创建逻辑单元(LUN)

/> cd iscsi//iscsi> cd iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8//iscsi/iqn.20....319cf16722f8> cd tpg1/luns /iscsi/iqn.20...2f8/tpg1/luns> create /backstores/block/block01 Created LUN 0.

5.创建网络入口(IP:Port，IP为target端地址，Port默认为3260)

/iscsi/iqn.20...2f8/tpg1/luns> cd ../portals//iscsi/iqn.20.../tpg1/portals> create 192.168.134.12Using default IP port 3260Created network portal 192.168.134.12:3260.

6.创建访问控制列表(ACL)

/iscsi/iqn.20.../tpg1/portals> cd ../acls /iscsi/iqn.20...2f8/tpg1/acls> lso- acls ..................................................................... [ACLs: 0]/iscsi/iqn.20...2f8/tpg1/acls> create iqn.1994-05.com.redhat:91a579c4e39Created Node ACL for iqn.1994-05.com.redhat:91a579c4e39Created mapped LUN 0.

7.完成目标创建

/> lso- / ............................................................................ [...]  o- backstores ................................................................. [...]  | o- block ..................................................... [Storage Objects: 1]  | | o- block01 ............................ [/dev/sdb (40.0GiB) write-thru activated]  | |   o- alua ...................................................... [ALUA Groups: 1]  | |     o- default_tg_pt_gp .......................... [ALUA state: Active/optimized]  | o- fileio .................................................... [Storage Objects: 0]  | o- pscsi ..................................................... [Storage Objects: 0]  | o- ramdisk ................................................... [Storage Objects: 0]  o- iscsi ............................................................... [Targets: 1]  | o- iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8 ............. [TPGs: 1]  |   o- tpg1 .................................................. [no-gen-acls, no-auth]  |     o- acls ............................................................. [ACLs: 1]  |     | o- iqn.1994-05.com.redhat:91a579c4e39 ...................... [Mapped LUNs: 1]  |     |   o- mapped_lun0 .................................. [lun0 block/block01 (rw)]  |     o- luns ............................................................. [LUNs: 1]  |     | o- lun0 ....................... [block/block01 (/dev/sdb) (default_tg_pt_gp)]  |     o- portals ....................................................... [Portals: 1]  |       o- 192.168.134.12:3260 ................................................. [OK]  o- loopback ............................................................ [Targets: 0]  o- vhost ............................................................... [Targets: 0]/> saveconfig Last 10 configs saved in /etc/target/backup.Configuration saved to /etc/target/saveconfig.json

8.设置认证凭证

/> cd iscsi//iscsi> cd iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8/tpg1//iscsi/iqn.20...f16722f8/tpg1> cd acls/iqn.1994-05.com.redhat:91a579c4e39//iscsi/iqn.20...t:91a579c4e39> set auth userid=IncomingUser/iscsi/iqn.20...t:91a579c4e39> set auth password=SomePassword/iscsi/iqn.20...t:91a579c4e39> set auth mutual_userid=OutgoingUser (可选，单向认证时无需设置)/iscsi/iqn.20...t:91a579c4e39> set auth mutual_password=AnotherPassword (可选，单向认证时无需设置)/iscsi/iqn.20...t:91a579c4e39> get authAUTH CONFIG GROUP=================mutual_password=AnotherPassword-------------------------------The mutual_password auth parameter.mutual_userid=OutgoingUser--------------------------The mutual_userid auth parameter.password=SomePassword---------------------The password auth parameter.userid=IncomingUser-------------------The userid auth parameter.

Initiator端配置

1.配置iscsid.conf 文件

$ sudo vim /etc/iscsi/iscsid.conf # 去掉以下几行注释，并根据Target端配置设置用户名和密码node.session.auth.authmethod = CHAPnode.session.auth.username = IncomingUsernode.session.auth.password = SomePasswordnode.session.auth.username_in = OutgoingUsernode.session.auth.password_in = AnotherPassword

2.发现目标

$ sudo iscsiadm -m discovery -t sendtargets -p 192.168.134.12192.168.134.12:3260,1 iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8

3.登录目标

$ sudo iscsiadm -m node -T iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8 -p 192.168.134.12 -l$ sudo iscsiadm -m session -P 0tcp: [1] 192.168.134.12:3260,1 iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8 (non-flash)$ sudo lsblk --scsiNAME HCTL       TYPE VENDOR   MODEL             REV TRANsda  2:0:0:0    disk VMware,  VMware Virtual S 1.0  spisdb  3:0:0:0    disk LIO-ORG  block01          4.0  iscsisr0  1:0:0:0    rom  NECVMWar VMware IDE CDR10 1.00 ata$ sudo fdisk -lDisk /dev/sdb: 40 GiB, 42949672960 bytes, 83886080 sectorsUnits: sectors of 1 * 512 = 512 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 4194304 bytes

Target端

$ sudo targetcli sessionsalias: initiator    sid: 1 type: Normal session-state: LOGGED_IN

4.登出

$ sudo iscsiadm -m node -T iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8 -p 192.168.134.12 -uLogging out of session [sid: 1, target: iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8, portal: 192.168.134.12,3260]Logout of [sid: 1, target: iqn.2003-01.org.linux-iscsi.target.x8664:sn.319cf16722f8, portal: 192.168.134.12,3260] successful.$ sudo iscsiadm -m session -P 0iscsiadm: No active sessions.