NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ISCSI login timeout from remote IP
I am trying to connect to a LUN on my readynas rn10200 via open-iscsi.
When the client is in my local network, the connection goes smoothly.
From outside the LAN, the connection fails. The NAS sits behind a router, but I
have set port forwarding for 3260 (and a few other ports just to test, such as
tcp:s 20 and 21 and 860). I also have forwarding for port 22.
open-iscsi in the remote client discovers the LUN on my nas, obtaining what
it seems to be the correct information. However, after issuing the login request
(for the right target), nothing happens and the request is dropped by timeout.
What am I doing wrong?
Thanks,
M. Natiello
When the client is in my local network, the connection goes smoothly.
From outside the LAN, the connection fails. The NAS sits behind a router, but I
have set port forwarding for 3260 (and a few other ports just to test, such as
tcp:s 20 and 21 and 860). I also have forwarding for port 22.
open-iscsi in the remote client discovers the LUN on my nas, obtaining what
it seems to be the correct information. However, after issuing the login request
(for the right target), nothing happens and the request is dropped by timeout.
What am I doing wrong?
Thanks,
M. Natiello
4 Replies
Replies have been turned off for this discussion
- Do you have very fast upload/download speeds on both sides? I don't recommend iSCSI over WAN.
Do you have very fast upload/download speeds on both sides? I don't recommend iSCSI over WAN.
Yes, I have. The upload times are OK for my needs. In any case, my problem is how to make it work.- Maybe run a tun/tap interface on both sides, and OpenVPN or something in between? Then they can talk to each other more freely.
What happens if you run 3260 over an SSH tunnel? - [SOLVED]
Apparently the problem is that the target declares its own address with the LAN number (the only one it knows).
open-iscsi then uses that number for login, despite the fact that the discovery of the target was possible because
of the WAN adress of the router hosting the target.
The solution is to edit by hand all references to the LAN-address in the database, replacing them with the
WAN-address. Then
iscsiadm -m node --login
properly connects to the target.
M.Natiello
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
