Securing LUNs accessed via iSCSI is accomplished by using Challenge-Handshake Authentication Protocol, or CHAP authentication. There are two flavors of CHAP authentication: unidirectional and bidirectional. The goal of this paper is to walk through the setup and understand the concepts around LUN masking in iSCSI.
