Belnet Storage - Technical FAQ

How to access to the management interface?
How to create a password and how to reset it?
Who can I contact in case of problem?
What types of volume can we create on the management interface?
How to create volume via the management interface?

iSCSI Volume:

How to create an iSCSI volume?
How do I connect to my iSCSI volume on Ubuntu Linux?
How do I connect to my iSCSI volume on Windows?

NFS Volume:

How to create a NFS volume?
How do I connect to my NFS volume on Ubuntu Linux?
How do I connect to my NFS volume on Windows?

Belnet Multi-Factor Authentication (MFA)

What is the Belnet Multi-Factor Authentication (MFA)?
Why the Belnet Multi-Factor Authentication is important?
How to use the Belnet Multi-Factor Authentication for the first time?
How to use the Belnet Multi-Factor Authentication after enrolment?
What to do in case of loss of mobile?
What if my Belnet Personal Login is linked to several organisations?

 

How to access to the management interface?

If you have signed the agreement, Belnet will configure your Belnet Storage Account into the interface. When you have received your username and Password, you can access to the interface.

How to create a password and how to reset it?

When you have signed your contract, Belnet will create and send your username and password. You can reset your password on https://changepassword.belnet.be/.

Who can I contact in case of problem?

You can contact our Belnet Service Desk via email servicedesk@belnet.be or by phone: 02 790 33 00.

What types of volume can we create on the management interface?


You can create 2 types of volumes: NFS and iSCSI:

  • iSCSI : This volume gives your sensitive data increased security.
  • NFS: This volume is ideal for data sharing and media library management.

How to create volume via the management interface?

To create a new volume, press the 'Add new volume' button.
You should add a Volume Name, Size (in TB), Description and Type (iSCSI or NFS).

How to create an iSCSI volume?

Enable CHAP Username & Password: (Optional, default: No CHAP)
You can enable CHAP Username & Password, and enter a CHAP username and CHAP password.
This CHAP username and CHAP password is only used to connect to the target (not for the discovery of the target).
Please note that Your CHAP username should differ for all your volumes.

iSCSI Client Name (IQN): (Optional, default: empty)
If you want to add a IQN (iSCSI Qualified Name), you can add a IQN in the form of iqn.2017-09.be.belnet:test.

ISCSI Client IP Address or Subnet: (Optional, default: empty/everyone)
You can add some Network addresses that have access to your iSCSI target.
This can be entered as CIDR notation or IP Address (e.g. 193.190.198.1,193.190.198.1/32 or 193.190.198.0/24)

Please note: if you don't specify one of the following, your iSCSI target is open for everyone.

If you click 'Add Volume', a task started to create the volume.
This can take a while (depending on the size and type of the volume), after the task is executed your volume is ready to be used.

How do I connect to my iSCSI volume on Ubuntu Linux?

  1. Install a iSCSI initiator, here we choose open-iscsi:
    	sudo apt-get install open-iscsi
        
  2. Configure your initiator:
    	/etc/iscsi/initiatorname.iscsi 
            InitiatorName=<your IQN used while creating the volume> 
            /etc/iscsi/iscsid.conf //
            if you want to login into your volume on boot 
            node.startup = automatic 
            //CHAP settings node.session.auth.authmethod = CHAP 
            node.session.auth.username = <CHAP Username> 
            node.session.auth.password = <CHAP Password>
        
  3. Discover your volume:
        sudo iscsiadm -m discovery -t st -p <IP Address> 
        <IP Address>:3260,1 iqn.2017-09.be.belnet:<Volume Name>
        
  4. Login into your volume:
        sudo iscsiadm -m node --target iqn.2017-09.be.belnet:<Volume Name> -p <IP Address> --login
        Logging in to [iface: default, target: iqn.2017-09.be.belnet:<Volume Name>, portal: <IP Address>,3260] (multiple) 
        Login to [iface: default, target: iqn.2017-09.be.belnet:<Volume Name>, portal:<IP Address> ,3260] successful.
        

How do I connect to my iSCSI volume on Windows?

1. Open Windows Server Manager (start => Server manager)

dashboard - Windows Server Manager

2. Click on 'Tools' => iSCSI initiator

dashboard configuration local server

3. Click 'Yes' to run the ISCSI initiator Service (this should be done only the first time, after that the service is started automatically)

iSCSI start service screen

4. Ensure that your IQN is correctly entered on the webinterface:

Click on 'Configuration' and check that the 'Inititor name' is correctly entered in the web GUI (if you entered one), otherwise the volume will not be discovered.

configuration setting board

5. Enter your Volume IP in the 'Targets' field and click 'Quick Connect' and click 'Done'.

discover target board

6. Click Connect => Advanced.

connect to target

7. Click on 'Enable CHAP logon' and enter your CHAP credentials and click on 'OK'. If everything goes well you should now see that your target is connected.

chap credentials screen

8. Go to 'Disk Managment' tools (right click on the start menu and click 'Disk Management').

open disk management

disk management
 

9. Right click on the disk and click on 'Online' to bring the disk online

disk online

 

10. Right click again on the disk and click 'Initialize Disk'

initialize disk board
 

11. Choose your partitioning style and click 'OK'

Choose your partitioning style and click OK

12. Right click on the unallocated space and click 'New Simple Volume'

connect to target

13. Follow the wizard, assign a drive letter and your volume is ready to use  

New Simple Volume Wizard  Specify volume Size

Assign Drive letter or path  Format Partition

Completing the new simple volume wizard

14. The volume is ready to use

The volume is ready

How to create a NFS volume?

To create a new volume, you can press the 'Add new volume' button.
You should add a volume name, Size (in TB), Description and Type (NFS).

NFS Client IP Address or Subnet: (mandatory)
IP Addresses that should have access to the volumes.
You can specify it in CIDR notation or IP Address (e.g. 193.190.198.1,193.190.198.1/32 or 193.190.198.0/24).

How do I connect to my NFS volume on Ubuntu Linux?

  1. Install the NFS client
    	sudo apt-get install nfs-common
        
  2. Create your mountpoint:
    	sudo mkdir -p /mnt/belnet-nfs
        
  3. Mount the volume:
        sudo mount :/mnt/ /mnt/belnet-nfs
        

Please note that you have to change your IP address and your volume name accordingly.

How do I connect to my NFS volume on Windows?

1. Open Windows Server Manager (start => Server manager)

Open server Manager

2. Click 'Manage Add Roles'

Add a role

3. Follow the wizard, to install the NFS Client feature.

Before you begin 
 
Select installation type

Select destination server

Select Server role

Select Feature

Confirm installation

Installation progress

4. Click on Map Network Drive

What network folder would you like to map

5. Permission issue

If you have a write permission issue you can resolve it by performing this.

  1. Run regedit on the Windows machine and locate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default
  2. Add two DWORD values: AnonymousUid and AnonymousGid
  3. Restart the Client for NFS service or reboot the computer.

*.reg file example for quick adding:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ClientForNFS\CurrentVersion\Default]
"AnonymousUid"=dword:000003e8
"AnonymousGid"=dword:000003e8

    What is the Belnet Multi-Factor Authentication (MFA)?

    Multi-Factor Authentication is an electronic authentication method where a user is only granted access to an application or website after successfully providing two or more authentication factors, significantly reducing your organisation's risk of falling victim to cybercrime.

    Why the Belnet Multi-Factor Authentication is important?

    The main benefit of MFA is that it improves the security of your organisation by requiring your users to identify themselves with more than just a username and password.
    By enforcing the use of an MFA factor such as a TOTP that your users have received on their smartphones, you can ensure better protection of user information and sensitive company data.

    How to use the Belnet Multi-Factor Authentication for the first time?

    Connect your username to an “Authenticator” that support TOTP like: Google Authenticator, Microsoft Authenticator or SaasPass.

    1. Install the authenticator of your choice on your mobile device.
    2. Log in to the Belnet application for which you need the Belnet Personal Login, for instance the Belnet Portal.
    3. In the beginning, you will have the possibility to select one from two possible authentication methods: with or without MFA. This is only temporary to allow you to get acquainted with the new methodology. In the future, only one option (the one with MFA) will be available. Select the version with MFA for your institution.
      screenshot_Storage_1
    4. Select the organisation with MFA and login, as you were used to do before. After password verification, you will get a new screen:
      enrol to TOTP
    5. As you didn’t make the connection yet, select “Enroll to TOTP”.
    6. Authenticate once more with LDAP to create your TOTP seed code.
      select jouw organsatie
    7. A new screen will show a QR code and a TOTP seed:

      QR Code
       
    8. This QR code is unique and is offered just once. As a backup, you may opt to save this QR code (taking a screen shot or a picture). This may be relevant in case you decide not to make the connection with your authenticator app right now.
    9. Open the authenticator app that was installed on your mobile device. Select to add an additional authentication (this depends on the chosen authenticator app, please consult the description of the app) and select the option to scan a QR code to add a new authentication.
    10. You are now ready to use the authenticator to login with MFA with your Belnet personal Login. The Authenticator app will generate codes of 6 to 8 digits that are only valid for a limited amount of time.
    11. Note that it is not possible to use <Back> in your browser to go back to the login screen. Just proceed with step 1 under “Use of MFA after enrolment”. 

    How to use the Belnet Multi-Factor Authentication after enrolment?

    1. Log in to the Belnet application for which you need your Belnet Personal Login.
    2. In the beginning, you will have the possibility to select from 2 possible authentication methods: with or without MFA. This is only temporary to allow you to get acquainted with the new methodology. In future, only one option (the one with MFA) will be available. Select the version with MFA for your institution.
    3. After password verification, you will get a new screen asking you to provide a Token Code:
      enrol to TOTP
    4. Open the Authenticator app, read the Token Code ( 6 to 8 digits) and provide these as an answer on the website of Belnet. Then you are logged in.

    What to do in case of loss of mobile?

    If your mobile device has been lost or does no longer function, act as follows:

    1. Log in to the Belnet application for which you need your Belnet Personal Login.
    2. In the beginning, you will have the possibility to select from 2 possible authentication methods: with or without MFA. This is only temporary to allow you to get acquainted with the new methodology. In future, only one option (the one with MFA) will be available. Select the version with MFA for your institution.
    3. Login, as you were used to do before. After password verification, you will get a new screen asking you to provide a Token Code:
      enrol to TOTP
    4. Select “Reset TOTP”. An e-mail will be sent to your mail address, you will see following message on the website: 

      a reset token message
       
    5. Open your mailbox. You will have received following message:
      mail for request of reset of a TOTP
    6. Click on the URL provided, you will be guided to a website that asks you to provide your username:

      Username login
       
    7. After providing your username, you will get following prompt:
      message TOTP
    8. Follow the procedure “First use of MFA” of this document to re-enrol yourself.

    What if my Belnet Personal Login is linked to several organisations?

    You’ll then need to set up MFA for each organisation separately in order to obtain a different token per organisation.

     

     

    Access to the Belnet Storage interface

    Did you find this FAQ useful?

    Copyright © 2021 Belnet.