搭建ISCSI Target 与linux initiator和windows 2007客户端连接

1、搭建ISCSI Target 与linux initiator和windows 2007客户端连接1. 目的（1）、在linux环境下搭建iscsi target， 然后在分别在linux initiator和win7客户端实现对联； (2)、一一验证iscsi target服务端输出的设备iscsi target服务端输入的设备可分为以下几种：1、lvm卷设备2、单一的分区3、整个物理磁盘4、raid组成的卷设备（3）、在搭建target时，在配置文件中指定该资源只允许给某些客户访问，指定ip访问等等2. 部署好操作环境下面先探讨在target端建立target，输出lvm设备3 配置环境设

2、备：VMware、Redhat linux6.4 1台 ip：192.168.1.103redhat linux6.4（复制宿主机的文件）1台 ip：192.168.1.107SecureCRT软件 一个windows2007 一台 ip：192.168.1.102在启动VMware，装好red hat linux6.4操作系统，关机加磁盘（SCSI）sdb、sdc、sdd； redhat 6.4 iscsi server target ip:192.168.1.103redhat6.4 switch windows 2007iscsi initiator iscsi initiatorip:

3、192.168.1.107 ip:192.168.1.1024. 搭建iscsi target4.1 加盘添加一块硬盘sdb作为iscsi target的存储，查看新加的磁盘是否已经加入去了，命令fdisk l可查看操作如下：rootLee # fdisk -lDisk /dev/sda: 10.7 GB, 10737418240 bytes255 heads, 63 sectors/track, 1305 cylindersUnits = cylinders of 16065 * 512 = 8225280 bytesSector size (logical/physical): 512 b

4、ytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00095e63 Device Boot Start End Blocks Id System/dev/sda1 * 1 39 307200 83 LinuxPartition 1 does not end on cylinder boundary./dev/sda2 39 676 5120000 83 LinuxPartition 2 does not end on cylinder boundary./dev/sda3 67

5、6 804 1024000 82 Linux swap / SolarisPartition 3 does not end on cylinder boundary./dev/sda4 804 1306 4033536 5 Extended/dev/sda5 804 1306 4032512 83 LinuxDisk /dev/sdb: 5368 MB, 5368709120 bytes255 heads, 63 sectors/track, 652 cylindersUnits = cylinders of 16065 * 512 = 8225280 bytesSector size (lo

6、gical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00000000rootLee #4.2 分配lvm创建逻辑卷lvm，分别是为linux iscsi initiator和windows 2007创建lvlinux和lvwindows，容量大小为2G（sdb 5G）5.2 创建物理卷（pv）操作如下rootLee # pvcreate /dev/sdb Physical volume "/dev/sdb" succ

7、essfully createdrootLee #5.2.1 查看pv命令“pvdisplay”可查看pv是否已经创建好操作如下：rootLee # pvdisplay "/dev/sdb" is a new physical volume of "5.00 GiB" - NEW Physical volume - PV Name /dev/sdb VG Name PV Size 5.00 GiB Allocatable NO PE Size 0 Total PE 0 Free PE 0 Allocated PE 0 PV UUID 7M8X4p-Y86

8、I-BMf8-eGGT-kQ5q-OBVL-2CrbKl rootLee # 5.3. 创建卷组（vg）创建好pv，接着在pv 的基础之上建一个卷组 vg（lishengquan）操作如下：rootLee # vgcreate lishengquan /dev/sdb Volume group "lishengquan" successfully createdrootLee #5.3.1 查看vg命令“vgdisplay”可以查看操作如下：rootLee # vgdisplay - Volume group - VG Name lishengquan System ID

9、Format lvm2 Metadata Areas 1 Metadata Sequence No 1 VG Access read/write VG Status resizable MAX LV 0 Cur LV 0 Open LV 0 Max PV 0 Cur PV 1 Act PV 1 VG Size 5.00 GiB PE Size 4.00 MiB Total PE 1279 Alloc PE / Size 0 / 0 Free PE / Size 1279 / 5.00 GiB VG UUID h0RTM6-0c0c-KWZf-b193-goGP-1q3p-0MMF8f root

10、Lee #5.4 创建逻辑卷（lvm）创建好卷组vg（5G），再在vg的里面划分出两个逻辑卷（各2G），分别是：lvlinux和lvwindows创建lvlinux操作如下：rootLee # lvcreate -L 2G -n lvlinux lishengquan Logical volume "lvlinux" createdrootLee #创建lvwindows操作如下：rootLee # lvcreate -L 2G -n lvwindows lishengquan Logical volume "lvwindows" createdroot

11、Lee #5.4.1 查看lvm命令“lvdisplay”查看逻辑卷操作如下rootLee # lvdisplay - Logical volume - LV Path /dev/lishengquan/lvlinux LV Name lvlinux VG Name lishengquan LV UUID pZfNlq-LkaP-qm7V-LE4j-USDv-qmJN-m6q3Tn LV Write Access read/write LV Creation host, time Lee, 2014-01-09 05:17:47 +0800 LV Status available # open

12、 0 LV Size 2.00 GiB Current LE 512 Segments 1 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:0 - Logical volume - LV Path /dev/lishengquan/lvwindows LV Name lvwindows VG Name lishengquan LV UUID Cnu65k-Sp5E-eqrr-RXXN-LR3u-f266-QIKOLf LV Write Access read/write LV

13、Creation host, time Lee, 2014-01-09 05:19:15 +0800 LV Status available # open 0 LV Size 2.00 GiB Current LE 512 Segments 1 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:1 rootLee #6 安装iscsi target创建好lvm，就接着安装iscsi target查看linux6.4是否已经 安装好target，可用命令：rpm -ql rpmna

14、me操作如下：rootLee # rpm -ql scsi-target-utilspackage scsi-target-utils is not installedrootLee #以上信息看出 target还没有安装安装target的时候先要看下redhat6.4是否自带了包rpm，先前安装的redhat5.4就没有target rpm，要自行下载安装，找target包比较麻烦，找到了又不不适合，上网查了说6.4的自带了，就安装6.4的用了。redhat6.4和5.4的包是在不同的目录下，6.4是在/media/Packages下，5.4是在/media/Server下操作如下：root

15、Lee # cat /etc/issueRed Hat Enterprise Linux Server release 6.4 (Santiago) 查看版本Kernel r on an mrootLee # cd /mnt/mediarootLee media# lsEULA EULA_pt RELEASE-NOTES-bn-IN.html RELEASE-NOTES-ja-JP.html RELEASE-NOTES-ru-RU.html ResilientStorageEULA_de EULA_zh RELEASE-NOTES-de-DE.html RELEASE-NOTES-kn-IN.

16、html RELEASE-NOTES-si-LK.html ServerEULA_en GPL RELEASE-NOTES-en-US.html RELEASE-NOTES-ko-KR.html RELEASE-NOTES-ta-IN.html TRANS.TBLEULA_es HighAvailability RELEASE-NOTES-es-ES.html RELEASE-NOTES-ml-IN.html RELEASE-NOTES-te-IN.html imagesEULA_fr LoadBalancer RELEASE-NOTES-fr-FR.html RELEASE-NOTES-mr

17、-IN.html RELEASE-NOTES-zh-CN.html isolinuxEULA_it Packages RELEASE-NOTES-gu-IN.html RELEASE-NOTES-or-IN.html RELEASE-NOTES-zh-TW.html media.repoEULA_ja README RELEASE-NOTES-hi-IN.html RELEASE-NOTES-pa-IN.html RPM-GPG-KEY-redhat-beta repodataEULA_ko RELEASE-NOTES-as-IN.html RELEASE-NOTES-it-IT.html R

18、ELEASE-NOTES-pt-BR.html RPM-GPG-KEY-redhat-releaserootLee media#6.5 查看target包进入Packages查看是否有target安装包操作如下：rootLee # cd /mnt/media/PackagesrootLee Packages# ls | grep scsiiscsi-initiator-utils-6.2.0.873-2.el6.i686.rpmlsscsi-0.23-2.el6.i686.rpmscsi-target-utils-1.0.24-2.el6.i686.rpmrootLee Packages#从反

19、馈回来的信息可以得知6.4是有target包的，可以直接安装，用命令：rpm -ivh rpmname6.5.1 安装target包操作如下：rootLee # cd /mnt/media/PackagesrootLee Packages# ls | grep scsiiscsi-initiator-utils-6.2.0.873-2.el6.i686.rpmlsscsi-0.23-2.el6.i686.rpmscsi-target-utils-1.0.24-2.el6.i686.rpmrootLee Packages# rpm -ivh scsi-target-utils-1.0.24-2.

20、el6.i686.rpmwarning: scsi-target-utils-1.0.24-2.el6.i686.rpm: Header V3 RSA/SHA256 Signature, key ID fd431d51: NOKEYPreparing. # 100% 1:scsi-target-utils # 100%rootLee Packages#6.5.2 查看target安装文件查看安装包target是否已经顺利安装，可用命令：rpm -ql rpmname操作如下：rootLee Packages#rpm -ql scsi-target-utils 查看target的安装文件/etc

21、/rc.d/init.d/tgtd 服务管理脚本/etc/sysconfig/tgtd 可指定服务配置文件路径/etc/tgt/targets.conf 服务配置文件/usr/sbin/tgt-admin target管理员工具/usr/sbin/tgt-setup-lun target中管理scsi设备逻辑单元号的工具/usr/sbin/tgtadm target管理工具/usr/sbin/tgtd target服务程序/usr/sbin/tgtimg 管理target框架的镜像文件的工具/usr/share/doc/scsi-target-utils-1.0.24 /usr/share/d

22、oc/scsi-target-utils-1.0.24/README/usr/share/doc/scsi-target-utils-1.0.24/README.iscsi/usr/share/doc/scsi-target-utils-1.0.24/README.iser/usr/share/doc/scsi-target-utils-1.0.24/README.lu_configuration/usr/share/doc/scsi-target-utils-1.0.24/README.mmc/usr/share/man/man5/targets.conf.5.gz/usr/share/ma

23、n/man8/tgt-admin.8.gz/usr/share/man/man8/tgt-setup-lun.8.gz/usr/share/man/man8/tgtadm.8.gzrootLee Packages#6.5.3 修改target配置文件安装好target软件，接着需要修改里面的配置内容，配置文件是：/etc/tgt/targets.conf编辑可用vi打开6.5.4 配置文件的语法使用<target>开始 </target>结束Iscsi qualified name（iqn）：如 iqn.lvlinux.targetBacking-store:后备存储，

24、一般指非实际的物理盘，如 lvm卷、某个分区等Direct-store：直接存储，与backing-store相对，指实际的物理磁盘（整块硬盘）iscsi接口的系统中一般表示为 sdb、sdc、sdd等Initiator-address：发起者地址，指定该资源只允许某些客户机使用，格式：initiator IP地址 如：192.168.1.102Incomingusername:使用chap认证协议，由target来认证initiator端，格式incomingusrename username username userpassword(如：incominguser lsq 0-9）6.5.

25、5 修改服务配置文件：targets.conf知道了配置文件语法的使用，接着修改target配置文件：vi /etc/tgt/targets.conf操作如下：rootLee Packages# vi /etc/tgt/targets.conf<target iqn.linux.targets1> backing-store /dev/lishengquan/lvlinux</target><target iqn.windows.targets2> backing-store /dev/lishengquan/lvwindows</target>

26、6.6 查看配置文件targets.conf查看target配置中的内容：egrep -v "#|$" /etc/tgt/targets.conf操作如下：rootLee Packages# egrep -v "#|$" /etc/tgt/targets.conf<target iqn.linux.targets1> backing-store /dev/lishengquan/lvlinux</target><target iqn.windows.targets2> backing-store /dev/lishen

27、gquan/lvwindows</target>default-driver iscsirootLee Packages#6.7 重新启动tgtd服务修改好target配置好文件，重新启动tgtd服务，先把tgtd停止，再打开start操作如下：rootLee Packages# service tgtd stop鍋滄 SCSI target daemon锛?60G纭畾rootLee Packages# service tgtd start姝湪鍚姩 SCSI target daemon锛?60G纭畾rootLee Packages#6.8 查看target端输出状态查看iscsi

28、target输出状态：tgt-admin -s操作如下：rootLee Packages# tgt-admin -sTarget 1: iqn.linux.targets1 System information: Driver: iscsi State: ready I_T nexus information: LUN information: LUN: 0 Type: controller SCSI ID: IET 00010000 SCSI SN: beaf10 Size: 0 MB, Block size: 1 Online: Yes Removable media: No Preven

29、t removal: No Readonly: No Backing store type: null Backing store path: None Backing store flags: LUN: 1 Type: disk SCSI ID: IET 00010001 SCSI SN: beaf11 Size: 2147 MB, Block size: 512 Online: Yes Removable media: No Prevent removal: No Readonly: No Backing store type: rdwr Backing store path: /dev/

30、lishengquan/lvlinux Backing store flags: Account information: ACL information: ALLTarget 2: iqn.windows.targets2 System information: Driver: iscsi State: ready I_T nexus information: LUN information: LUN: 0 Type: controller SCSI ID: IET 00020000 SCSI SN: beaf20 Size: 0 MB, Block size: 1 Online: Yes

31、Removable media: No Prevent removal: No Readonly: No Backing store type: null Backing store path: None Backing store flags: LUN: 1 Type: disk SCSI ID: IET 00020001 SCSI SN: beaf21 Size: 2147 MB, Block size: 512 Online: Yes Removable media: No Prevent removal: No Readonly: No Backing store type: rdwr

32、 Backing store path: /dev/lishengquan/lvwindows Backing store flags: Account information: ACL information: ALLrootLee Packages#以上iscsi配置已完成。从target的输出状态可以看出是正常的。7配置 iscsi initiator发起端客户端（linux 复制宿主的、windows 7 自带了iscsi initiator发起端软件）7.1 linux iscsi initiator 的安装7.1.1 查看initiator安装文件查看linux 复制是否安装了is

33、csi-initiator-utils操作如下：rootLee Packages# rpm -ql iscsi-initiator-utilspackage iscsi-initiator-utils is not installedrootLee Packages#从信息反馈来看，还没装initiator软件，可以使用命令rpm -ivh rpmname 安装，不过前提是要有initiator安装包（6.4的安装包是在/media/Packages目录下）7.2 查看iscsi initiator包直接查找命令：ls | grep name 操作如下：rootLee Packages# ls

34、 | grep iscsiiscsi-initiator-utils-6.2.0.873-2.el6.i686.rpmrootLee Packages#从信息看到该版本是有的initiator这个包的，有了就好办，可以直接用命令：rpm -ivh rpmname进行安装7.3 initiator的安装操作如下：rootLee Packages# rpm -ivh iscsi-initiator-utils-6.2.0.873-2.el6.i686.rpmwarning: iscsi-initiator-utils-6.2.0.873-2.el6.i686.rpm: Header V3 RSA/

35、SHA256 Signature, key ID fd431d51: NOKEYPreparing. # 100% 1:iscsi-initiator-utils # 100%rootLee Packages#查看initiator安装文件操作如下：rootLee # rpm -ql iscsi-initiator-utils/etc/NetworkManager/etc/NetworkManager/dispatcher.d/etc/NetworkManager/dispatcher.d/04-iscsi/etc/iscsi/etc/iscsi/iscsid.conf/etc/logrota

36、te.d/iscsiuiolog/etc/rc.d/init.d/iscsi/etc/rc.d/init.d/iscsid/sbin/brcm_iscsiuio/sbin/iscsi-iname/sbin/iscsiadm/sbin/iscsid/sbin/iscsistart/sbin/iscsiuio/usr/lib/libiscsi.so.0/usr/lib/python2.6/site-packages/libiscsimodule.so/usr/share/doc/iscsi-initiator-utils-6.2.0.873/usr/share/doc/iscsi-initiato

37、r-utils-6.2.0.873/README/usr/share/man/man8/iscsi-iname.8.gz/usr/share/man/man8/iscsiadm.8.gz/usr/share/man/man8/iscsid.8.gz/usr/share/man/man8/iscsistart.8.gz/usr/share/man/man8/iscsiuio.8.gz/var/lib/iscsi/var/lib/iscsi/ifaces/var/lib/iscsi/isns/var/lib/iscsi/nodes/var/lib/iscsi/send_targets/var/li

38、b/iscsi/slp/var/lib/iscsi/static/var/lock/iscsirootLee #以上initiator客户端已配置好配置好target端之后，initiator发起端还不能正常连接到target服务，原因是linux下的SElinux以及iptables没有关闭。7.4 关闭SElinuxvi编辑/etc/selinux/config 文件中的SELINUX=“”为disabled，然后把SElinux 重启就行了。如果不想rebootselinux，可以使用命令：setenforce 0（设置selinux成为permissive许可模式）参数1是enforc

39、ing（强制执行模式）具体操作：rootLee Packages# vi /etc/selinux/config# This file controls the state of SELinux on the system.# SELINUX= can take one of these three values:# enforcing - SELinux security policy is enforced.# permissive - SELinux prints warnings instead of enforcing.# disabled - No SELinux policy i

40、s loaded.SELINUX=disabled# SELINUXTYPE= can take one of these two values:# targeted - Targeted processes are protected,# mls - Multi Level Security protection.SELINUXTYPE=targeted"/etc/selinux/config" 13L, 457C查看selinux状态：getenforce 出现SELinux status参数为enabled即为开启状态rootLee Packages# getenfo

41、rceDisabledrootLee Packages#信息显示已关闭8 连接iscsi target8.1 liunx客户端连接iscsi target可用命令：iscsiadm -m discovery -t st -p ip地址操作如下：rootLee Packages# iscsiadm -m discovery -t st -p 192.168.1.103 OK iscsid: OK 192.168.1.103:3260,1 iqn.linux.targets1192.168.1.103:3260,1 iqn.windows.targets2rootLee Packages#8.2

42、windows 7连接iscsi target 打开计算磁盘管理看到2G新加的磁盘（未使用），右击新建卷，安装完驱动就可以使用。target端输出为单一分区1 加盘关闭linux操作系统，添加一块sdc硬盘（sdc：scsi接口硬盘默认是sdx；ide接口硬盘默认是hdx）2.1 查看添加的硬盘：fdisk -l操作如下：rootLee # fdisk -lDisk /dev/sda: 10.7 GB, 10737418240 bytes255 heads, 63 sectors/track, 1305 cylindersUnits = cylinders of 16065 * 512 = 8

43、225280 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00095e63 Device Boot Start End Blocks Id System/dev/sda1 * 1 39 307200 83 LinuxPartition 1 does not end on cylinder boundary./dev/sda2 39 676 5120000 83 LinuxPartition

44、 2 does not end on cylinder boundary./dev/sda3 676 804 1024000 82 Linux swap / SolarisPartition 3 does not end on cylinder boundary./dev/sda4 804 1306 4033536 5 Extended/dev/sda5 804 1306 4032512 83 LinuxDisk /dev/sdb: 5368 MB, 5368709120 bytes255 heads, 63 sectors/track, 652 cylindersUnits = cylind

45、ers of 16065 * 512 = 8225280 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00000000Disk /dev/sdc: 5368 MB, 5368709120 bytes 新加的磁盘sdc255 heads, 63 sectors/track, 652 cylindersUnits = cylinders of 16065 * 512 = 8225280 byt

46、esSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00000000Disk /dev/mapper/lishengquan-lvlinux: 2147 MB, 2147483648 bytes255 heads, 63 sectors/track, 261 cylindersUnits = cylinders of 16065 * 512 = 8225280 bytesSector size (log

47、ical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0xa2224f56 Device Boot Start End Blocks Id SystemDisk /dev/mapper/lishengquan-lvwindows: 2147 MB, 2147483648 bytes255 heads, 63 sectors/track, 261 cylindersUnits = cylinders of 16065 * 512 = 822528

48、0 bytesSector size (logical/physical): 512 bytes / 512 bytesI/O size (minimum/optimal): 512 bytes / 512 bytesDisk identifier: 0x00000000rootLee #信息显示新添加的硬盘已正常2.2 磁盘分区命令：fdisk /dev/sdc操作如下：rootLee # fdisk /dev/sdcDevice contains neither a valid DOS partition table, nor Sun, SGI or OSF disklabelBuilding a new DOS disklabel with disk identifier 0x950fc20b.Changes will remain in memory only, until you decide to write them.After that, of course, the previou