Start a Conversation

Solved!

Go to Solution

9031

July 26th, 2019 09:00

Event ID: 7.4.3, iSCSI login to target from initiator failed

I have 2 Dell PowerEdge R640 servers both running VMware ESXi 6.0.0 5572656.  One that is about 6 months old connects to my Equallogic PS4100 without issue, my new one is set up exactly the same but I receive the 7.4.3 login to target failed, reason: "Initiator is not authorized for this target" error.  I have no access policies and no CHAP configuration.

July 31st, 2019 10:00

Found an error in the EQL configuration.  When I added the new server to the access control list for the volumes, I had an * for CHAP rather than the appropriate information.  All is well once again.

Thanks,

1 Rookie

 • 

1.5K Posts

July 26th, 2019 13:00

Hello, What are you using for access control? IQN or IP address? For ESX I suggest CHAP. It's easy to setup and when you add another node you just have to provide the CHAP credentials on the new ESXi server. You don't have to modify the EQL array at all. Especially helpful with multiple volumes. The other possibility is that you have not set the "Simultaneous access" check box on your volumes. That prevents accidental duplicate access in case you are not running a cluster aware filesystem. It in the Advanced settings for each volume being used. I would also make sure the servers are configured to Dell best practices. https://downloads.dell.com/solutions/storage-solution-resources/BestPracticesWithPSseries-VMware%28TR1091%29.pdf Regards, Don

July 29th, 2019 14:00

I enabled CHAP on the EQ, created a policy to enforce it then added the authentication information to my vmware host.  I still get the message "Initiator is not authorized for this target" on the EQ.

 

Allow simultaneous connections is chosen for the 2 volumes I need to connect.

1 Rookie

 • 

1.5K Posts

July 29th, 2019 17:00

Hello, On the EQL side did you first create the CHAP username and password? usually when there's a problem with CHAP it's either that or there is a problem with the password. Regards, Don

July 30th, 2019 08:00

I've enabled CHAP on the EQL, then went to VSphere and added the authentication information to the Static Discovery information of the iSCSI adapter for both volumes.  When I rescan the Storage, I get the error: Initiator is not authorized for this target" in the event log on the EQL, same as when I did not use CHAP.

 

Level Error
Time 7/30/2019 10:41:49 AM
Member BFR-EQ01
Subsystem MgmtExec
Event ID 7.4.3 7.4.22
Message iSCSI login to target '192.168.27.10:3260, iqn.2001-05.com.equallogic:0-fe83b6-52eb033c1-b1a0000002a546d5-bfr-default-vm-volume' from initiator '192.168.27.50:32812, iqn.1998-01.com.vmware:bfr-esx4-7af56192' failed for the following reason: Initiator is not authorized for this target.

1 Rookie

 • 

1.5K Posts

July 30th, 2019 11:00

Hello, 

You say you enabled CHAP. 

 Walk me through the steps you did before you created the access policy.  You have to first create the username and password in the group.  Did you do that?   If so I would suggest re-doing the password again.  Typically should be 12+ characters. 

 Then re-do the credentials in ESXi initiator as well. 

  Just to be sure. 

  Regards, 

Don 

 

July 30th, 2019 12:00

From EQL, Group configuration, iSCSI, add CHAP user using 15 character password. Go to Access Policies and add new policy referencing the CHAP account created before with no iSCSI initiator listed and *.*.*.* as the IP address.

 

From vSphere, open properties of iSCSI adapter, add CHAP credentials.  I've tried both "Use CHAP unless prohibited by target" and "do not use CHAP unless required by target". with same results.  Save changes, Rescan HBA.

Open EQL, go to Monitoring and same error as before.

vSphere error:

 

Login to iSCSI target
iqn.2004-04.com.qnap:ts-877xu-rp:iscsi.qnap2.3-
5ed10 on vmhba44 @ vmk1 failed. The iSCSI
initiator could not establish a network connection
to the target.
error
7/30/2019 2:55:12 PM
bfr-esx4.bpc.main

1 Rookie

 • 

1.5K Posts

July 30th, 2019 20:00

Hello, that error is not from the EQL array. iqn.2004-04.com.qnap:ts-877xu-rp:iscsi.qnap2.3- The IQN name is wrong. EQL volumes are com.equallogic Also for CHAP on the ESXi side I use "Use unidirectional CHAP" Regards, Don

July 31st, 2019 10:00

Login to iSCSI target iqn.2001-05.com.equallogic:
0-fe83b6-afab033c1-b380000004754753-vm-hea-
rtbeat on vmhba44 @ vmk1 failed. Target
returned login error of: 0202.
error
7/31/2019 12:26:19 PM
bfr-esx4.bpc.main

July 31st, 2019 10:00

Level Error
Time 7/31/2019 12:25:08 PM
Member BFR-EQ01
Subsystem MgmtExec
Event ID 7.4.3 7.4.22
Message iSCSI login to target '192.168.27.11:3260, iqn.2001-05.com.equallogic:0-fe83b6-afab033c1-b380000004754753-vm-heartbeat' from initiator '192.168.27.50:45048, iqn.1998-01.com.vmware:bfr-esx4-7af56192' failed for the following reason: Initiator is not authorized for this target.

1 Rookie

 • 

1.5K Posts

July 31st, 2019 11:00

Hello, Thank you for letting us know that it's resolved! You are very welcome. Regards,' Don
No Events found!

Top