iSCSI and fibre channel authentication
AssigneeCisco Technology, Inc.
InventorChandan Mishra
Life of this patent
Estimating the term…
Abstract
Methods and apparatus are provided for authenticating an iSCSI initiator connected to a fibre channel storage area network. An iSCSI initiator performs an authentication exchange with a fibre channel target such as a fibre channel host or disk array through one or more fibre channel switches. Authentication information such as password information no longer is required at fibre channel switches and can instead be aggregated at fibre channel targets.
Claims27
A fibre channel switch connected to an Internet Small Computer Systems Interface (iSCSI) initiator and a fibre channel target, the fibre channel switch comprising:
- an iSCSI interface configured to receive a first authentication negotiation message from an initiator, the authentication negotiation message identifying a plurality of authentication algorithms;
- a processor coupled to the iSCSI interface, the processor configured to translate the first authentication negotiation message into a second authentication negotiation message for a fibre channel fabric;
- and
- a fibre channel interface configured to transmit a second authentication negotiation message from the fibre channel switch to the fibre channel target, the second authentication negotiation message corresponding to the first authentication negotiation message.
A method for providing authentication between an initiator and a fibre channel target, the method comprising:
- receiving a first authentication negotiation message at a fibre channel switch from an initiator connected to the fibre channel switch, the authentication negotiation message identifying a plurality of authentication algorithms;
- transmitting a second authentication negotiation message from the fibre channel switch to the fibre channel target, the second authentication negotiation message corresponding to the first authentication negotiation message;
- receiving a first authentication challenge message at the fibre channel switch from the fibre channel target, the authentication challenge message including a random sequence;
- and
- transmitting a second authentication challenge message to the initiator, the second authentication challenge message corresponding to the first authentication challenge message.
A storage area network switch for providing authentication between an initiator and a fibre channel target, the storage area network switch comprising:
- means for receiving a first authentication negotiation message at a fibre channel switch from an initiator connected to the fibre channel switch, the authentication negotiation message identifying a plurality of authentication algorithms;
- means for transmitting a second authentication negotiation message from the fibre channel switch to the fibre channel target, the second authentication negotiation message corresponding to the first authentication negotiation message;
- means for receiving a first authentication challenge message at the fibre channel switch from the fibre channel target, the authentication challenge message including a random sequence;
- and
- means for transmitting a second authentication challenge message to the initiator, the second authentication challenge message corresponding to the first authentication challenge message.
A data center, comprising:
- an Internet Small Computer Systems Interface (iSCSI) initiator;
- a fibre channel disk array;
- and
- a fibre channel switch connected to the iSCSI initiator and the fibre channel disk array, the fibre channel switch configured to receive a first authentication negotiation message from the initiator and transmit a second authentication negotiation message to the fibre channel disk array, wherein the fibre channel disk array uses the second authentication negotiation message along with password information for the iSCSI initiator to begin authenticating the iSCSI initiator.
A financial data storage area network comprising:
- an Internet Small Computer Systems Interface (iSCSI) initiator;
- a fibre channel host;
- a fibre channel disk array;
- and
- a fibre channel switch connected to the iSCSI initiator and the fibre channel disk array, the fibre channel switch configured to receive a first authentication negotiation message from the initiator and transmit a second authentication negotiation message to the fibre channel disk array, wherein the fibre channel disk array uses the second authentication negotiation message along with password information for the iSCSI initiator to begin authenticating the iSCSI initiator.
Dependencies are inferred from the claim text.