Volume Access Groups

Last modified
<< PrevNext >>

The ‘Volume Access Groups’ page allows you to configure volume access groups, which are containers of initiator parameters that, when mapped to a volume, specify which initiators are able to access that volume.  When an initiator attempts to connect to a volume, your appliance checks the volume access groups assigned to that volume to see if the initiator’s parameters match one of the entries contained within a volume access group mapped to that volume.  The volume access group configuration page is shown below. 



This page lists in a tabular view the name of the volume access group, CHAP user associated with it, IP address of the server and the iSCSI Qualified Name (IQN) of the initiator that is trying to access the volume. The various operations involved with the volume access groups are discussed in the following sections -

Back to Top

Creating a Volume Access Group

 Each volume access group can contain an IP address, CHAP credentials, or an IQN.  Perform the following steps to create a new volume access group.
  1. Click the ‘Add new group’ button found at the bottom of the table as shown above.  The tabular view will change to edit mode, and appear as follows.
  2. Supply a name for the group.  Group names should be unique. 
  3. When you have finished configuring the group name, select a CHAP user from the drop-down list.  If you do not wish to use CHAP, select the ‘Any User’ user from the drop-down. 
  4. Supply an IP address, and an initiator name.  If you do not wish to perform matching using IP addresses or IQN, simply leave the fields blank. 
  5. Once you have a volume access group defined and configured, click the check icon Green_Check_20X18.png to save the Volume Access Group, or click the ‘delete’ icon Red_Cross_20X20.png to discard it.


Note that all configured values for a volume access group member must be satisfied before the initiator will be allowed to access the volume.  For instance, if you supply a value for IP address, specify ‘Any User’ for CHAP, and leave IQN blank, any initiator that attempts to access the volume from the configured IP address will have access to that volume.  However, if you specify a CHAP user, IP address, and IQN, all of those parameters must match before the initiator will be allowed to access the volume.


File:User:AlpaK/StorSimple_Web_UI_User_Guide/image009.jpg Note: If there are more than one network paths to the server, the VAGs should be inclusive of all the paths. For details, refer to the KB article regarding IQN-based Configuration of Volume Access Groups.

File:User:AlpaK/StorSimple_Web_UI_User_Guide/image009.jpg Note: An initiator can only be a member of a single volume access group (VAG). If a server is referenced by its IP address in one VAG, its IP address (or the subnet containing the IP address) cannot be referenced in another VAG. Similarly, a CHAP user and an IQN can only be referenced in a single VAG. Therefore, it is recommended that each VAG represent a unique server in scenarios where there may be overlap.


Back to Top

Editing a Volume Access Group

Clicking the ‘edit’ icon Edit_Pencil_20X19.png, allows you to change the configuration of the volume access group.

Back to Top

Deleting a Volume Access Group

Deleting a configured volume access group can be accomplished by clicking the ‘delete’ icon Red_Cross_20X20.png found near the left end of the row.

Back to Top

<< PrevNext >>
Page statistics
1032 view(s) and 26 edit(s)
Social share
Share this page?


This page has no custom tags.
This page has no classifications.