I have 2 Dell PowerEdge R640 servers both running VMware ESXi 6.0.0 5572656. One that is about 6 months old connects to my Equallogic PS4100 without issue, my new one is set up exactly the same but I receive the 7.4.3 login to target failed, reason: "Initiator is not authorized for this target" error. I have no access policies and no CHAP configuration.
Solved! Go to Solution.
Found an error in the EQL configuration. When I added the new server to the access control list for the volumes, I had an * for CHAP rather than the appropriate information. All is well once again.
I enabled CHAP on the EQ, created a policy to enforce it then added the authentication information to my vmware host. I still get the message "Initiator is not authorized for this target" on the EQ.
Allow simultaneous connections is chosen for the 2 volumes I need to connect.
I've enabled CHAP on the EQL, then went to VSphere and added the authentication information to the Static Discovery information of the iSCSI adapter for both volumes. When I rescan the Storage, I get the error: Initiator is not authorized for this target" in the event log on the EQL, same as when I did not use CHAP.
Time 7/30/2019 10:41:49 AM
Event ID 7.4.3 7.4.22
Message iSCSI login to target '192.168.27.10:3260, iqn.2001-05.com.equallogic:0-fe83b6-52eb033c1-b1a0000002a546d5-bfr-default-vm-volume' from initiator '192.168.27.50:32812, iqn.1998-01.com.vmware:bfr-esx4-7af56192' failed for the following reason: Initiator is not authorized for this target.
You say you enabled CHAP.
Walk me through the steps you did before you created the access policy. You have to first create the username and password in the group. Did you do that? If so I would suggest re-doing the password again. Typically should be 12+ characters.
Then re-do the credentials in ESXi initiator as well.
Just to be sure.
From EQL, Group configuration, iSCSI, add CHAP user using 15 character password. Go to Access Policies and add new policy referencing the CHAP account created before with no iSCSI initiator listed and *.*.*.* as the IP address.
From vSphere, open properties of iSCSI adapter, add CHAP credentials. I've tried both "Use CHAP unless prohibited by target" and "do not use CHAP unless required by target". with same results. Save changes, Rescan HBA.
Open EQL, go to Monitoring and same error as before.
Login to iSCSI target
5ed10 on vmhba44 @ vmk1 failed. The iSCSI
initiator could not establish a network connection
to the target.
7/30/2019 2:55:12 PM
Time 7/31/2019 12:25:08 PM
Event ID 7.4.3 7.4.22
Message iSCSI login to target '192.168.27.11:3260, iqn.2001-05.com.equallogic:0-fe83b6-afab033c1-b380000004754753-vm-heartbeat' from initiator '192.168.27.50:45048, iqn.1998-01.com.vmware:bfr-esx4-7af56192' failed for the following reason: Initiator is not authorized for this target.
Login to iSCSI target iqn.2001-05.com.equallogic:
rtbeat on vmhba44 @ vmk1 failed. Target
returned login error of: 0202.
7/31/2019 12:26:19 PM