You can create an iSCSI initiator group to provide access control for iSCSI targets. Only iSCSI initiators that are members of the initiator group can access the iSCSI targets.

Procedure

  1. Navigate to the vSAN cluster.
  2. Click the Configure tab.
    Option Description
    vSphere Client
    1. Under vSAN, click iSCSI Target Service.
    2. Click the Initiator Groups tab, and click the Add a new iSCSI initiator group (Create license icon) icon. The New Initiator Group dialog box is displayed.
    3. Enter a name for the iSCSI initiator group.
    4. (Optional) To add members to the initiator group, enter the IQN of each member. Use the following format to enter the member IQN:

      iqn.YYYY-MM.domain:name

      Where:
      • YYYY = year, such as 2016
      • MM = month, such as 09
      • domain = domain where the initiator resides
      • name = member name (optional)
    vSphere Web Client
    1. Under vSAN, click iSCSI Initiator Groups.
    2. In the vSAN iSCSI Initiator Groups section, click the Add a new iSCSI initiator group icon. The New vSAN iSCSI Initiator Group dialog box is displayed.
    3. Enter a name for the iSCSI initiator group.
    4. (Optional) To add members to the initiator group, enter the IQN of each member. Use the following format to enter the member IQN:

      iqn.YYYY-MM.domain:name

      Where:
      • YYYY = year, such as 2016
      • MM = month, such as 09
      • domain = domain where the initiator resides
      • name = member name (optional)
  3. Click OK or Create.

What to do next

Add members to the iSCSI initiator group.