Does CHAP work reliable? Any drawbacks?

[RemyZ]

Hi.

Back in the SAN/iQ 8.1 days, a trainer who teached us SAN/iQ told that CHAP authentication did not work quite well. I forgot the details though and I am not sure if it was true what he said.

So my question is: does CHAP authentication work okay nowadays? Are there any drawbacks by using CHAP? How does it affect performance for instance?

Thanks

Remy

[Emilo]

Looking over the new classnotes. I dont see any issues with Chap.

However its use is somewhat negated if you have your SAN on a isolated network or VLAN.

The only thing I saw on it was not to loose your passwords.

[RemyZ]

Thanks Emilo.

We have a quite large Lefthand SAN (isolated network). Some of the volumes need to be attached to a particular server and some people in our organization are afraid that this server might be hacked. If so, then all volumes on the SAN could be, in theory, compromised. We could lower the risk by introducing CHAP protected volumes.