We are currently running iscsi in an open network and would like to migrate our iscsi to a separate vlan. Reading through the documentation this doesn't seem to be possible. Instead iet/iscsitarget seems to advertise the service on all the IP's of the iscsi target. Since not all of these IP addresses are available on our iscsi initators. Which in turn breaks our xen autostartup during boot (timeout too long).
Restricting the subnet in /etc/iet/initiators.allow and denying all in /etc/iet/initiators.deny doesn't seem to have the desired effect:
# /etc/iet/initiators.allow
ALL 192.168.50.0/24
ALL 192.168.51.0/24
# /etc/iet/initiators.deny
ALL ALL