QuestionQ88

ONTAP SAN implementation and configuration

A customer has a new eight-node NetApp AFF cluster that will provide NVMe/TCP namespaces to clients. Bidirectional, in-band authentication is required between every NVMe host and the AFF cluster.

Which NetApp ONTAP feature must be configured to satisfy this requirement?

  • A DH-HMAC-CHAP
  • B SAML IdP
  • C Kerberos 5p
  • D Active Directory domain-tunnel
Explanation

ONTAP uses DH-HMAC-CHAP for secure in-band NVMe/TCP authentication. Bidirectional authentication is enabled by configuring both a host secret and a controller secret, allowing the controller to authenticate the host and the host to authenticate the controller.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!