Troubleshooting when ESXi Hosts Disconnect with CHAP Enabled
Problem
Enabling CHAP authentication leads to ESXi hosts disconnecting and they are unable to reconnect.
Scenario
The array has CHAP authentication enabled and is unable to reconnect after configuring CHAP on the ESXi host.
Cause
Purity does not support Dynamic Discovery with CHAP.
Solution
Follow this blog post for a more detailed guide.
Configure the ESXi host to use static CHAP, confirm Dynamic CHAP is not set up, and inherit from parent is not checked.
Two methods of configuring CHAP to the pure array:
Procedure 1 - Manually enter Static Discovery targets
- Configure array to use CHAP by entering Host User and Host Password in GUI > Storage Tab > Host > Gear > Configure CHAP.
- Confirm iSCSI Adapter > Properties > Dynamic Discovery does NOT contain array target.
- Configure iSCSI initiator to use CHAP by selecting Use CHAP and entering Name and Secret that matches array CHAP settings in vSphere Client > iSCSI Adapter > Properties > General tab > CHAP.
- Add Static Discovery array targets in vSphere Client > iSCSI Adapter > Properties > Static Discovery. Confirm the CHAP settings for each target are set to Inherit from parent.
- Rescan adapter
Procedure 2 - Enter CHAP settings for each discovered Static Discovery target
- Configure array to use CHAP by entering Host User and Host Password in GUI > Storage Tab > Host > Gear > Configure CHAP.
- Enter a single array iSCSI port IP address in iSCSI Adapter > Properties > Dynamic Discovery.
- Confirm Static Discovery list is populated with array iSCSI targets in iSCSI Adapter > Properties > Dynamic Discovery.
- For each array Static Discovery target configure CHAP settings to NOT inherit from parent and Use CHAP in iSCSI Adapter > Properties > Static Discovery > <target> > Settings > CHAP.
- Rescan adapter