Q. How do I install and configure iSCSI initiator service under FreeBSD server?
A. FreeBSD 7.x has full support for iSCSI. Older version such as FreeBSD 6.3 requires backport for iSCSI. Following instruction are known to work under FreeBSD 7.0 only.
FreeBSD iscsi_initiator driver
The iscsi_initiator implements the kernel side of the Internet SCSI (iSCSI) network protocol standard, the user land companion is iscontrol and permits access to remote virtual SCSI devices via cam.
Compile driver
Please note that FreeBSD 7.x has this driver compiled by default. You can skip this step if driver exists at /boot/kernel/iscsi_initiator.ko. To compile this driver into the kernel,
# cd /usr/src/sys/i386/conf
# cp GENERIC ISCSIKERNEL
# vi ISCSIKERNEL
Place the following lines in your kernel configuration file:
device iscsi_initiator
Save and close the file. Building a Kernel, type the following commands:
# cd /usr/src
# make buildkernel KERNCONF=ISCSIKERNEL
Install the new kernel:
# make installkernel KERNCONF=ISCSIKERNEL
Now reboot the system:
# reboot
Install iSCSI Initiator driver under FreeBSD
You need FreeBSD kernel driver for the iSCSI protocol. You need to use driver called /boot/kernel/iscsi_initiator.ko. You can load this driver by typing following command as root user:
# kldload -v iscsi_initiator.ko
Output:
Loaded iscsi_initiator.ko, id=6
Alternatively, to load the driver as a module at boot time, place the following line in /boot/loader.conf:
# vi /boot/loader.conf
# Beginning of the iSCSI block added by Vivek
iscsi_initiator_load="YES"
# End of the block added by Vivek
Save and close the file.
FreeBSD iscontrol command to login / negotiator / control for an iSCSI initiator session
Now, you need to use iscontrol command. First, do a discovery session and exit:
# iscontrol -d targetaddress=iSCSI-SERVER-IP-ADDRESS initiatorname=nxl
# iscontrol -v -d targetaddress=192.168.1.100 initiatorname=nxl
Please note down the list of available targetnames/targetadresses. Once you know the target name, edit /etc/iscsi.conf file:
# vi /etc/iscsi.conf
Append config directives as follows:
officeiscsi {
authmethod = CHAP
chapIName = YOUR-ISCSI-USERNAME
chapSecret = YOUR-ISCSI-PASSWORD
initiatorname = nxl
TargetName = iqn.XYZZZZZZZZZZZZZ # whatever "iscontrol -v -d " gives you
TargetAddress = 192.168.1.100:3260,1 # your iscsi server IP
}
Save and close the file.
Where,
- officeiscsi { : Start config for iSCSI.
- authmethod : Set authentication method to chap
- chapIName : Your username
- chapSecret : Your password
- initiatorname : if not specified, defaults to iqn.2005-01.il.ac.huji.cs:<hostname>
- TargetName : is the name by which the target is known, not to be confused with target address, either obtained via the target administrator, or from a discovery session.
- TargetAddress : is of the form domainname[:port][,portal-group-tag] to quote the RFC: The domainname can be specified as either a DNS host name, a dotted-decimal IPv4 address, or a bracketed IPv6 address as specified in [RFC2732].
- } : End of config
Start an iSCSI session
The following command will read options from /etc/iscsi.conf, use the targetaddress found in the block nicknamed myiscsi, login and negotiate whatever options are specified, and start an iscsi-session.
# iscontrol -c /etc/iscsi.conf -n officeiscsi
Once you run the iscontrol command it should create a new device in /dev directory. To see the device name run dmesg command:
# dmesg
Format iSCSI volume
Now run sysinstall command to format just discovered iSCSI device name at /dev location:
# sysinstall
Select Custom > 3 Partition > Select iSCSI device name such as da1. Once formatted just mount device, enter:
# mkdir /iscsi
# mount /dev/da1s1 /iscsi
You may also need to update /etc/fstab file:
/dev/ad1s1 /iscsi ufs rw 3 3
- Email FAQ to a friend
- Printable version
- Rss Feed
- Last Updated: 3-11-08

{ 11 comments… read them below or add one }
Great information. Hard to find this amount of details anywhere on the web for FBSD iSCSI. Totally appreciate the efforts
Hi,
great guid, but how do you automate the part below
iscontrol -c /etc/iscsi.conf -n officeiscsi
and do you get fstab part to work without the above?
thanks
Hi, there’s a small typo here:
“You may also need to update /etc/fstab file:
/dev/ad1s1 /iscsi ufs rw 3 3″
i guess ad1s1 should be da1s1. anyway.
thx for the howto
Has anyone tried this, and if so, is it stable?
So far no problem here but yes technology is new…
Just tested it with Openfiler and it doesn’t work.
I will soon test it with FreeNAS also.
I keep having this error:
#iscontrol -c /etc/iscsi.conf -n target0
0×0203: Not found
If I play with the username/pass (change it) it cryes about authentification error…
I’ll also do some tcpdump traces to see what’s the error…
Andrei,
I’ve tested above instructions only on FreeBSD 7. Let us know more about your findings on FreeNAS or Openfiler.
It works with Openfiler (tested only on vmware environment). I reconfigured from the beginning. The important thing is to remove any network ACLs and authentification and start from the simplest configuration. But I can’t set it to add the device automatically after reboot (excluding cron’s @reboot).
I tried this tutorial on a amd64 version. It works fine up to the part, where the new partion shuld be mounted. When trying to mount the device (mount /dev/da0s1 /iscsi), the following message occurs:
mount: /dev/da0s1 : Invalid argument
I tried to build the fs, with the following command:
newfs /dev/da0s1
After this, the device can be mounted. But when trying to access the volume (read or write) the complete machine freezes and needs a hard-reset to start up again. Any ideas?
I agree with Andrei… works great with OpenFiler, both being under VMware control. But, I also tested with a ZFS iSCSI target on Solaris 10 08/07, and it didn’t work. I think the ZFS iSCSI target controller (or the Solaris 10 one) is broken, as a Mac OS iSCSI initiator can’t talk to it properly either. I will check more into the compatibility issue. But, doing a “iscontrol -c /etc/iscsi.conf -n ” causes an infinite da???? detection loop by the system.
Ian
I just set this up between freebsd 7.0 and netapp filer simulator (ontap 7251) , both running under virtualbox 214 with CHAP authentication. All worked very well since the very first try.
This is obviously not a production environment so I can’t really tell anything except that it worked with the mentioned config:(
I noticed a small flaw of iscontrol: I could not display valid initiator name of my freebsd, this should be something like iqn.XXXXXX….., it is visible on filer after first discovery session, but you need to have access to storage side, which not always is possible (large organisations often have separate teams).