Home > Workload Solutions > Oracle > White Papers > Deploying PowerMax 25GbE iSCSI with Oracle Databases > iSCSI setup on database server
This section describes how to set up the Oracle database server to access PowerMax storage over iSCSI. In these examples, we are using Oracle Linux 8 server, but the process is relatively the same for all supported Linux distributions.
# yum install iscsi-initiator-utils
# cat /etc/iscsi/initiatorname.iscsi
InitiatorName=iqn.1988-12.com.oracle:dsib0162
# firewall-cmd –permanent –add-port=3260/tcp
# firewall-cmd –reload
Multipathing software is critical for any database deployment since it provides load balancing, path failover, and pseudo names for devices. In this document we are using native multipathing, device mapper (DM) as an example.
# yum install device-mapper-multipath
# mpathconf --enable --with_multipathd y
# device-mapper-multipath configuration file
# For a complete list of the default configuration values, run either:
# # multipath -t
# or
# # multipathd show config
# For a list of configuration options with descriptions, see the
# multipath.conf man page.
defaults {
user_friendly_names yes
find_multipaths yes
enable_foreign "^$"
path_selector "round-robin 0"
path_grouping_policy "multibus"
}
blacklist_exceptions {
property "(SCSI_IDENT_|ID_WWN)"
}
blacklist {
}
multipaths {
multipath {
wwid 360000970000197600352533030304142
alias ora_grid1
}
multipath {
wwid 360000970000197600352533030304143
alias ora_grid2
}
...
...
If CHAP authentication has been configured on PowerMax for security, which can only be done using Solutions Enabler CLI for PowerMax, it also needs to be configured on the database servers so it will be possible to login to PowerMax iSCSI targets.
To use CHAP authentication, enable CHAP and set the username and password for the CHAP challenge to match what is configured on PowerMax by editing /etc/iscsi/iscsid.conf on host. After making changes, restart the iscsid daemon for the changes to take effect. The example below shows configuration changes for one-way CHAP authentication.
…
# *************
# CHAP Settings
# *************
# To enable CHAP authentication set node.session.auth.authmethod
# to CHAP. The default is None.
node.session.auth.authmethod = CHAP
…
# To set a CHAP username and password for initiator
# authentication by the target(s), uncomment the following lines:
node.session.auth.username = iqn.1988-12.com.oracle:dsib0162
node.session.auth.password = SecretDsib0162
…
# To enable CHAP authentication for a discovery session to the target
# set discovery.sendtargets.auth.authmethod to CHAP. The default is None.
discovery.sendtargets.auth.authmethod = CHAP
# To set a discovery session CHAP username and password for the initiator
# authentication by the target(s), uncomment the following lines:
discovery.sendtargets.auth.username = iqn.1988-12.com.oracle:dsib0162
discovery.sendtargets.auth.password = SecretDsib0162
Note: CHAP authentication on PowerMax can be configured only through SymCLI command line interface. It cannot be done using Unipshere. See Appendix for SymCLI examples for CHAP and other iSCSI related commands.
# iscsiadm -m discovery -t sendtargets -p 192.168.209.3
192.168.209.3:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000003
# iscsiadm -m discovery -t sendtargets -p 192.168.209.4
192.168.209.4:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000004
# iscsiadm -m node -T iqn.1992-04.com.emc:600009700bc724603bac01d500000003 \
-p 192.168.209.3 -l
Logging in to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000003, portal: 192.168.209.2,3260]
Login to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000003, portal: 192.168.209.2,3260] successful.
# iscsiadm -m node -T iqn.1992-04.com.emc:600009700bc724603bac01d500000004 \
-p 192.168.209.4 -l
Logging in to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000004, portal: 192.168.209.4,3260]
Login to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000004, portal: 192.168.209.18,3260] successful.
# iscsiadm -m session
tcp: [1] 192.168.209.3:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000003 (non-flash)
tcp: [2] 192.168.209.4:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000004 (non-flash)
# iscsiadm -m session --sid=1 --op new
Logging in to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000003, portal: 192.168.209.3,3260] (multiple)
Login to [iface: default, target: iqn.1992-04.com.emc:600009700bc724603bac01d500000003, portal: 192.168.209.3,3260] successful.
# iscsiadm -m session
tcp: [1] 192.168.209.3:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000003 (non-flash)
tcp: [2] 192.168.209.4:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000004 (non-flash)
tcp: [9] 192.168.209.3:3260,0 iqn.1992-04.com.emc:600009700bc724603bac01d500000003 (non-flash)