iSCSI targets on Linux (Open-E iSCSI) behind NAT


I was wondering, how to use iSCSI targets for my personal purposes on Linux. Because I am planning deploy a Linux Server in my home for Web hosting, ftp server etc. and whole this stuff will be working  behind of firewall and NAT.

After testing Open – E iSCSI, I decide this is great service of providing by Open-E on Linux.


But they say, Open-E iSCSI targets is not working behind of NAT now and they do not have plans to do this. This is really bad news 😦



Can I connect to Open-E iSCSI targets behind NAT?

Article ID: 1333
Last updated: 25 Jul, 2011
Views: 146
Posted: 25 Jul, 2011
by: Nowakowski S.
Updated: 25 Jul, 2011
by: Nowakowski S.

To explain why iSCSI targets behind NAT can not be accessed
by a initiator we have to explain how iSCSI connection works.
It is a two-step connection. One step is discovering portal and
second is actual log in. Even though iSCSI targets IPs can be
translated via NAT and discovered, they send back theirs inner
IPs to initiators using SendTargets function. Initiators will not
be able to connect to targets via those. In the future
such a functionality might be implemented using Internet Storage
Name Service but we do not have any plans to do so yet.

The only possible workaround is to create a VPN tunnel between Initiator and NAT. In this way the Open-E iSCSI targets can be seen as they would be in LAN. 


  1. Leave a comment

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: