2.8. Managing LUN Views

LUN views provide a way to create and manage an access control list (ACL) that limits access to chosen LUNs for specific initiators. Initiators not on the list have access to all LUNs in iSCSI target groups. Volumes exported via Fibre Channel target groups, however, can only be accessed by initiators that are added to group ACL. .. see also in admin guide.

To use ACL-based authorization, enable it for the target group:

# vstorage-target tg-auth -enable-acl -id <tg_ID>

2.8.1. Creating LUN Views

To create a LUN view for an initiator, use the commands vstorage-target tg-initiator add or vstorage-target view-add. The former command adds an initiator to target group’s ACL and creates a view for it. The latter command is used to add views to initiators that are already on the ACL.

For example:

# vstorage-target tg-initiator add -alias initiator2 -luns 0,1 \
-tg ee764519-80e3-406e-b637-8d63712badf1 -wwn iqn.1994-05.com.redhat:1535946874d

This command adds the initiator with the IQN iqn.1994-05.com.redhat:1535946874d to the ACL of the target group with the ID ee764519-80e3-406e-b637-8d63712badf1 and creates a view allowing it to access the LUNs with the IDs 0 and 1.

Another example:

# vstorage-target view-add -tg faeacacd-eba6-416c-9a7f-b5ba9e372e16 -lun 2 -map 2 \
-wwn iqn.1994-05.com.redhat:1535946874d

This command adds a view for the same initiator allowing it to access LUN 2 as well.

2.8.2. Listing LUN Views

To list LUN views for an initiator, use the vstorage-target view-list command. For example:

# vstorage-target view-list -tg ee764519-80e3-406e-b637-8d63712badf1 \
-wwn iqn.1994-05.com.redhat:1535946874d

This command lists views for the initiator with the IQN iqn.1994-05.com.redhat:1535946874d.

2.8.3. Changing LUN View Details

To change LUN views for an initiator, use the vstorage-target view-set command. For example:

# vstorage-target view-set -luns 1 -tg ee764519-80e3-406e-b637-8d63712badf1 \
-wwn iqn.1994-05.com.redhat:1535946874d

This command allows the initiator with the IQN iqn.1994-05.com.redhat:1535946874d to access only LUN 1. Essentially, it deletes all LUN views for it excluding specified.

2.8.4. Deleting LUN Views

To delete a LUN view for an initiator, use the vstorage-target view-del command.

# vstorage-target view-del -lun 1 -tg ee764519-80e3-406e-b637-8d63712badf1 \
-wwn iqn.1994-05.com.redhat:1535946874d

This command deletes the view for LUN 1 for the initiator with the IQN iqn.1994-05.com.redhat:1535946874d.