This document will discuss how to perform iSCSI boot from UCS with OpenFiler.
This document will expend on information which is already discussed here, showing only basic UCS configuration.
There are several other good instructions on similar topic available on the Internet, this one is intended as a step-by-step breakdown for beginners.
This document requires that you have basic knowledge of UCS systems and iSCSI
In this case devices will be connected in the same subnet of 184.108.40.206/24
UCS initiator will use 220.127.116.11 and OpenFiler will reside on 18.104.22.168 IPs.
In this document OpenFiler installation and initial configuration will not be covered. Version 2.99 will be used through this exercise.
The openfiler GUI is available at https://<ip.add.re.ss>:446
First step, needed later is to define an network access policy.
Under "System" tab scroll down to "Network Access Configuration" and add network which will be used by initiator, in this case 22.214.171.124/24.
Click "update" when done.
The result should show up:
This element will used later on when defining a iSCSI access.
Click "Services" tab.
Make sure "iSCSI Target" is both enabled and running.
Select "Volume" tab at the top menu and scroll down to "Create a new Volume group".
Provide a name and physical volume to be used and click "Add volume group".
The result should appear under "Volume Group Management".
In this case:
Still under "Volumes", from right hand menu select "Add Volume"
Scroll down to "Create a volume in vol_group1" give it a name and a description, a size and select Filesystem / Volume type as BLOCK.
Press "create" when done.
When looking at Volumes in volume group "vol_group1" the administrator should see their creation reflected.
With this in place configuration of iSCSI can be performed.
Under "Volumes" tab, from right hand menu select "iSCSI targets"
When "add" button is pressed new configuration options are presented. Those are typically expert-only options which are not going to be discussed here.
In this case IQN used as target is:
The administrator can now proceed to moving to the tabs above "add new iSCSI Target".
First task to be done is to map volume to LUN.
In the case of this example only one volume was created , called "My FS" which is going to be mapped to created IQN
iqn.2006-01.com.openfiler:tsn.ef131db239f3 by pressing "Map" button on the right hand side of the volume.
The result should be visible as follows
An important thing to point out is that this volume is now mapped as LUN 0 this will be used later in UCS configuration.
Moving on to "Network ACL" tab.
Previously configured ACL is already present but, by default in "Deny" mode.
Switch is to Access "Allow" and press "Update" button.
The result should be:
For the sake of this authentication no CHAP authentication is going to be used in this example.
If CHAP authentication is required, an authentication set needs to be configured on both UCS and OpenFiler.
Under chap authrncation, specify a user and password for incoming requests. Press "Add" button when done.
The result should look as follows.
UCS configuration will heavily rely on on settings previously indicated.
IQN of iqn.2006-01.com.openfiler:tsn.ef131db239f3 and LUN id or 0, host IP address of 126.96.36.199 are going to be used.
In this case UCS 2.1.3a is being used and a UCS B server.
Under "Servers" tab. navigate to "Service Profile", select appropriate profile you want to edit.
Open vNIC leaf.
In this case my vNIC eth0 will be used, it's using my VLAN (3709) as the native VLAN.
This might become , iSCSI boot is only supported over native VLAN. In this case only this VLAN is configured.
Select the "iSCSI vNICs" leaf under the service profile. On the bottom of UCS manager select "Add" button.
In this iSCSI vNIC over eth0 is going to be configured with native vlan (3709) as selected vlan.
MAC address is not to be assigned.
Press "Save changes".
iSCSI can perform CHAP authentication.
In this example we will not be using it, but to configure it if necessary head to:
Servers tab, from the left hand menu select Policies and iSCSI authentication profiles .
Right click to create a new authentication profile.
Provide a name of profile, username and password. Press "OK" button when done.
The configured vNIC needs to be now assigned as boot device.
Under the rigth service profile select "Boot order" tab.
Double click the vNIC on the left hand menu in "boot order" it should insert it to main "boot order" window.
From the left hand "Specific boot policy" menu, visible two figures up, select "Set boot parameters".
This should prompt you to finally start specifying iSCSI parameters.
Initiator (UCS's) IQN, this example will use same thing as example provided as reference, "iqn.2013-01.com.myserver124"
Initiator address is going to be 188.8.131.52 with appropriate netmask.
No authentication parameters will be used.
In case of this lab setup the iSCSI initiator and target where available via same VLAN, thus default gateway didn't need to be configured.
This is not an uncommon setup, but default gateway needs to be specified when initiator are not layer 2 adjacent.
(Optional) Another note about the authentication profile (Visible at the top of above screenshot). This is the place to reference created iSCSI authentication profile.
In same window iSCSI target can be configured by clicking the "add" button located at the bottom right of the screen.
iSCSI Target Name is the IQN which was created in OpenFiler, same for LUN, which refers our Volume to LUN mapping configured in OpenFiler.
IP address is the IP of OpenFiler 184.108.40.206.
In the below example no authentication is being used.
Press "OK" button, when finished.
That should take care of iSCSI boot configuration with OpenFiler.
Time to verify the setup.
In this case UCS B chassis was used, the server used was first server on the blade.
bdsol-6248-06-B# connect adapter 1/1/1
adapter 1/1/1 # connect
adapter 1/1/1 (top):1# attach-mcp
adapter 1/1/1 (mcp):1# iscsi_get_config
vnic iSCSI Configuration:
dhcp status: false
IP Addr: 220.127.116.11
Subnet Mask: 255.255.255.0
Target Idx: 0
Prev State: ISCSI_TARGET_DISABLED
Target Error: ISCSI_TARGET_NO_ERROR
IP Addr: 18.104.22.168
Boot Lun: 0
Ping Stats: Success (13.009ms)
iSCSI ping was successful (there is basic connectivity present) and device was able to connect to LUN 0.
(Optional) If authentication was/is used two additional fields will be visible in the iSCSI state.
The username and password (obfuscated).
CHAP Name: cisco
CHAP Secret: ********
Ping Stats: Success (12.461ms)
To verify completely, a verification with a operating system can be performed.
in this case Red Hat Enterprise Linux will be used during installation.
During installation, "Specialized Storage Device" was chosen.
Following that we can chose "Other SAN Devices"
The configured LUN is visible we can see the IP address (and TCP port), the IQN and LUN number as well as capacity and SCSI as protocol.
Installation can now proceed.
OpenFiler is a linux-based unified storage system.
iSCSI is based on RFC 3720 and expanded in subsequent RFCs.
Cisco Unified Computing System. For more information head to.