1 ------------------------------
2 iSCSI Initiator for VMware ESX
3 ------------------------------
7 - VMware ESX 6.5 or later using Virtual Machine compatibility 6.5 with VMFS 6.
9 **iSCSI Discovery and Multipath Device Setup:**
11 The following instructions will use the default vSphere web client and esxcli.
13 #. Enable Software iSCSI
15 .. image:: ../images/esx_web_client_storage_main.png
18 Click on "Storage" from "Navigator", and select the "Adapters" tab.
19 From there right click "Confgure iSCSI".
23 .. image:: ../images/esx_config_iscsi_main.png
26 If the initiator name in the "Name & alias" section is not the same name
27 used when creating the client during gwcli setup or the initiator name used
28 in the ansible client_connections client variable, then ssh to the ESX
29 host and run the following esxcli commands to change the name.
31 Get the adapter name for Software iSCSI:
35 > esxcli iscsi adapter list
36 > Adapter Driver State UID Description
37 > ------- --------- ------ ------------- ----------------------
38 > vmhba64 iscsi_vmk online iscsi.vmhba64 iSCSI Software Adapter
40 In this example the software iSCSI adapter is vmhba64 and the initiator
41 name is iqn.1994-05.com.redhat:rh7-client:
45 > esxcli iscsi adapter set -A vmhba64 -n iqn.1994-05.com.redhat:rh7-client
49 .. image:: ../images/esx_chap.png
52 Expand the CHAP authentication section, select "Do not use CHAP unless
53 required by target" and enter the CHAP credentials used in the gwcli
54 auth command or ansible client_connections credentials variable.
56 The Mutual CHAP authentication section should have "Do not use CHAP"
59 Warning: There is a bug in the web client where the requested CHAP
60 settings are not always used initially. On the iSCSI gateway kernel
61 logs you will see the error:
65 > kernel: CHAP user or password not set for Initiator ACL
66 > kernel: Security negotiation failed.
67 > kernel: iSCSI Login negotiation failed.
69 To workaround this set the CHAP settings with the esxcli command. Here
70 authname is the username and secret is the password used in previous
75 > esxcli iscsi adapter auth chap set --direction=uni --authname=myiscsiusername --secret=myiscsipassword --level=discouraged -A vmhba64
77 #. Configure iSCSI Settings
79 .. image:: ../images/esx_iscsi_recov_timeout.png
82 Expand Advanced settings and set the "RecoveryTimeout" to 25.
84 #. Set the discovery address
86 .. image:: ../images/esx_config_iscsi_main.png
89 In the Dynamic targets section, click "Add dynamic target" and under
90 Addresses add one of the gateway IP addresses added during the iSCSI
91 gateway setup stage in the gwcli section or an IP set in the ansible
92 gateway_ip_list variable. Only one address needs to be added as the gateways
93 have been setup so all the iSCSI portals are returned during discovery.
95 Finally, click the "Save configuration" button. In the Devices tab, you
96 should see the RBD image.
98 The LUN should be automatically configured and using the ALUA SATP and
99 MRU PSP. Other SATPs and PSPs must not be used. This can be verified with
104 > esxcli storage nmp path list -d eui.your_devices_id