Starwind 5 access rights

[megacc]

Hi ,

im trying to filter out unwanted iscsi initiator clients through access rights rules but it didn't work , the initiator client failed to detect the target.
i setup access rights as follow :

-myrule : (source :iqn.1991-05.com.micrososft.com:mail-srv.mydomain.com) , (destination : iqn.2008-08.com.starwindsoftware.com:starwind01.mydomain.com-one),(interface:all interface) <== set to allow
-DefaultAccessPolicy : Denied

is that correct ?

[Robert (staff)]

Does it connect with no access rights at all?
Also, can you post here a screen shot of your access right inlay?

Thanks

[megacc]

Hi Robert ,
If I set (DefaultAccessPolicy : set to allow) it will connect , i found strange thing :
on ("-myrule : (source :iqn.1991-05.com.micrososft.com:mail-srv.mydomain.com) , (destination : iqn.2008-08.com.starwindsoftware.com:starwind01.mydomain.com-one),(interface:all interface) <== set to allow") at destination i replace the iqn target name with a device name and it work although in the list there wasn't any device name only iqn target names . im far away from the pc now but i'll try to get a screen shot as soon as possible

thanks

[Robert (staff)]

Any chance we could get that screen shot?

Thanks.

[EGarbuzov]

Hi!

I have same question.
1. Pic.1 "All allow": all my ESXs (gesx2, vhs211, vhs212, etc...) can see and work with all LUNs (main, backUP, batrachenko). All OK.
2. Pic. 2 "My rules": gesx2 see LUN main, but doesn't see LUN backUP. I try reboot esx and rescan vmhba many times.

I want to connect both LUNs (main and backUP) to gesx2. What should I do whith Access Rights?

PS: sorry for my english

[Constantin (staff)]

I recommend you to change default policy to block. Then add all required initiators to white list.