AZ-800 Administering Windows Server Hybrid Core Infrastructure Exam

Administer iSCSI Targets and Initiators

Managing iSCSI Targets and Initiators is essential for setting up networked storage in a hybrid Windows Server environment. An iSCSI target is the server-side storage resource, while an iSCSI initiator is the client that connects to it. Together, they create a SAN-like solution over standard network hardware. Proper administration ensures reliable and secure data access for virtual machines and applications.

To start, you must provision and configure iSCSI target services on your Windows Server. Begin by installing the iSCSI target role and enabling the iSCSI Target Service to run at boot time. You will also need to set the target name and create virtual disks that clients will use. Then, configure network bindings to ensure stable connections over your LAN. Key steps include:

• Install Role: Use Server Manager to add the iSCSI Target Server role.
• Enable Service: Set the iSCSI Target Service to start automatically.
• Define Targets: Create targets and link virtual disks as LUNs.

After provisioning, establish and map initiators to Logical Unit Numbers (LUNs). Use the built-in iSCSI Initiator tool to discover targets by specifying the server’s IP address or DNS name. Once discovered, log in to each target and configure the connection to start automatically with Windows. A typical workflow includes:

• Discover targets on the Discovery tab.
• Log in using the Targets tab.
• Enable Automatic Reconnect for persistent access.

Monitoring session performance and connectivity helps maintain storage SLAs. Use Performance Monitor counters such as iSCSI Bytes Read/sec and iSCSI Bytes Write/sec to track throughput. Check Event Viewer logs for warnings or errors that indicate disconnects or timeouts. Regular monitoring keeps latency low and prevents disruptions in data access.

To secure your storage network, implement Challenge-Handshake Authentication Protocol (CHAP) and configure access controls. CHAP uses a shared secret to verify initiator identity before granting access. Update the /etc/iscsi/iscsid.conf file or use the iSCSI Initiator tool on Windows to set CHAP credentials. Security steps include:

• Configure CHAP secrets on both initiators and targets.
• Edit /etc/iscsi/iscsid.conf to define the shared secret.
• Update access control lists (ACLs) to restrict access to authorized initiators.

Conclusion

In this section, you learned how to administer iSCSI in a Windows Server hybrid infrastructure. You saw how to provision iSCSI target services, establish and map initiators to LUNs, monitor session performance, and secure connections with CHAP and access controls. These steps let you build a robust storage network that supports virtual machines and applications. Mastering iSCSI setup and management ensures efficient and secure data transfers in both on-premises and Azure environments.