About iSCSI Authentication
Setting up authentication for iSCSI devices on your network is optional. In a secure environment, authentication is not required because only trusted initiators can access the targets. In a less secure environment, the target cannot determine whether a connection request is truly from a given host. In this situation, the target can authenticate an initiator using the Challenge-Handshake Authentication Protocol (CHAP).
CHAP authentication uses the notion of a challenge and response in which the target challenges the initiator to prove its identity. For the challenge-response method to work, the target must know the initiator's secret key and the initiator must be set up to respond to the challenge.

