toasters October 2014

toasters@lists.teaparty.net

28 participants
18 discussions

cDOT security best practise reference?
by Martin 01 Apr '15

01 Apr '15

Hi, I've recently written a Netapp security policy for 7-mode Ontap. I used the TRs for reference: Data ONTAP Security Guidance - TR-3950 (November 2011) PCI-DSS Version 2.0 and Data ONTAP 8.1 TR-3996 (August 2012) Both of these are fairly old and not specific to cDOT. I've seen TR-4191 but that is specific to Windows File services: TR-4191 - Best Practices Guide for Clustered Data ONTAP 8.2.x Windows File Services Does anyone know of any best practise documents for cDOT whether Netapp or otherwise? Thanks Martin -- View this message in context: http://network-appliance-toasters.10978.n7.nabble.com/cDOT-security-best-pr… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

9 13

FCP Ports operational down
by Alexander Griesser 28 Nov '14

28 Nov '14

Hi there, I'm having a hard time currently connecting my new FAS8020 to our existing fabric - the FCP ports just won't get online and I'm not sure where exactly the problem is and how to debug that since I'm more the NAS guy not having much practical experience with FCP configurations, so here's the deal for all of you who are wanting to help. FAS8020 Clustered Data Ontap 8.2.1 Brocade DS4900B Brocade Switchport: > portcfgshow 0 Area Number: 0 Speed Level: AUTO(HW) Fill Word: 0(Idle-Idle) AL_PA Offset 13: OFF Trunk Port ON Long Distance OFF VC Link Init OFF Locked L_Port OFF Locked G_Port OFF Disabled E_Port OFF Locked E_Port OFF ISL R_RDY Mode OFF RSCN Suppressed OFF Persistent Disable OFF LOS TOV enable OFF NPIV capability ON QOS E_Port OFF Port Auto Disable: OFF Mirror Port OFF F_Port Buffers OFF Fault Delay: 0(R_A_TOV) NPIV PP Limit: 126 > portshow 0 portIndex: 0 portName: portHealth: OFFLINE Authentication: None portDisableReason: None portCFlags: 0x1 portFlags: 0x1 PRESENT U_PORT LocalSwcFlags: 0x0 portType: 10.0 POD Port: Port is licensed portState: 2 Offline Protocol: FC portPhys: 4 No_Light portScn: 0 port generation number: 0 state transition count: 0 portId: 010000 portIfId: 4302100d portWwn: 20:00:00:05:1e:5b:f9:a3 portWwn of device(s) connected: Distance: normal portSpeed: N4Gbps LE domain: 0 FC Fastwrite: OFF Interrupts: 2 Link_failure: 0 Frjt: 0 Unknown: 0 Loss_of_sync: 0 Fbsy: 0 Lli: 2 Loss_of_sig: 2 Proc_rqrd: 5 Protocol_err: 0 Timed_out: 0 Invalid_word: 0 Rx_flushed: 0 Invalid_crc: 0 Tx_unavail: 0 Delim_err: 0 Free_buffer: 0 Address_err: 0 Overrun: 0 Lr_in: 0 Suspended: 0 Lr_out: 0 Parity_err: 0 Ols_in: 0 2_parity_err: 0 Ols_out: 0 CMI_bus_err: 0 Port part of other ADs: No FCP Adater on NetApp: Node: jetfire Adapter: 1b Description: Fibre Channel Target Adapter 1b (QLogic 8324 (8362), rev. 2, 16G) Physical Protocol: fibre-channel Maximum Speed: 16 Status: link not connected Substatus: ADAPTER UP Host Port Address: 0 Firmware Revision: 6.10.0 Data Link Rate (Gbit): 0 Fabric Established: false Connection Established: loop Mediatype: ptp Configured Speed: 4 Configured State: up Switch Port: : AFAIK, the 16Gbit/s adapter should be backwards compatible to 4Gbit/s, our switch only has 4Gbit/s but it supports NPIV which seems to be a requirement for running Clustered Data Ontap via FC. So, I have no idea what information I should provide upfront for someone who's wanting to help me through get through that, but I'm more than happy to send more info when requested. Thanks, Alexander Griesser System-Administrator ANEXIA Internetdienstleistungs GmbH Telefon: +43-5-0556-320 Telefax: +43-5-0556-500 E-Mail: ag(a)anexia.at<mailto:ag@anexia.at> Web: http://www.anexia.at<http://www.anexia.at/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

9 30

StoreVault Chassis Swap
by Stephen Stocke 03 Nov '14

03 Nov '14

Hi We have a need to recover some data which was stored on a StoreVault S550. We have all the disks from the original system and a spare S550 chassis. Unfortunately, we don't have the CF card from the original system but the spare chassis still has its original CF card and we have licenses for the protocols required on the spare. Does anyone have any insights as to how we can accomplish this? I'm hoping it will be as easy as booting the spare chassis to maintenance mode and changing ownership of the disks and then booting from vol0 on the newly found aggregate. We're a little nervous to just try it without some guidance in case there's any chance that the new controller might do something drastic to the "foreign" disks. We're obviously out of other options if we're considering this path... Finally, Netapp have taken down the old KB which provided the procedure for a chassis swap (KB42667) and unfortunately I don't have a copy anywhere. I don't think it quite covered our scenario but if anyone has a copy and can forward it, I would be grateful! Kind regards Steve -------------------------------------------------------------------------------- This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal -------------------------------------------------------------------------------- disclaimer This email communication does not create or vary any contractual relationship between LogicalisCI and you. Internet communications are not secure and accordingly LogicalisCI does not accept any legal liability for the contents of this message. The contents of this email are confidential to the intended recipient at the email address to which it has been addressed. It may not be disclosed to or used by anyone other than this addressee, nor may it be copied in any way. If received in error, please contact LogicalisCI on the above number (listed as Main) quoting the name of the sender and the addressee and then delete it from your system. Please note that neither LogicalisCI nor the sender accepts any responsibility for viruses and it is your responsibility to scan the email and attachments (if any). Please be aware that LogicalisCI may monitor email traffic data and also email content for security purposes. The following companies are collectively referred to in the above statements as LogicalisCI: Logicalis Channel Islands Limited, Registered in Jersey No: 67161, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH Logicalis Jersey Limited, Registered in Jersey No: 10124, Registered Office: Rue A La Dame, Five Oaks, St. Saviour, Jersey, JE2 7NH Logicalis Guernsey Limited, Registered in Guernsey No: 10896, Registered Office: Pitronnerie Road, St. Peter Port, Guernsey, GY1 2RF

2 2

working with oplocks
by Eric Peng 31 Oct '14

31 Oct '14

I have an end user who would like to be able to use a "veto oplock files" setting (found in Samba) on the NetApp, but from what I can tell this feature does not appear to be available. Seems to me that oplocks handling on the NetApp is more simplified (either enabled or disabled). Wanted to confirm if this is the case, or are there ways to emulate the "veto oplock files" setting feature on the NetApp? I am running SMB 2.0 on our NetApp (7-mode), DOT 8.1.4 P1. Thanks, Eric

3 5

C-mode 8.3
by Mike Gossett 31 Oct '14

31 Oct '14

Hi all: It looks like the ontap 8.3 release is out. Does anyone have any information about the upgrade process from 8.2.2 c-mode? My NetApp SE informed me that with 8.3 they are doing away with the required 6 dedicated disks for the cluster storage... i'm curious if this upgrade path is minimally disruptive. Thanks, Mike

5 4

cDOT cluster net flow control?
by Mike Thompson 31 Oct '14

31 Oct '14

Hey all, I have two ancient 8.0.5 cDOT clusters running several 6080s with pairs of Cisco 5010s for 10gig cluster net, 2 x 10gig cluster ports per filer (can't upgrade them, no support, long story..) Anyway, just recently one of these clusters started periodically spewing some partial and full packet loss errors on the cluster net - multiple filers, multiple ports, not local to a specific cluster switch. Tried powering off each cluster switch, I get the same thing whether it's one, the other, or both switches in play. I notice that flow control is enabled on the ports filer-side, but not on the cluster switches. I never really paid any attention to that, as they came from NetApp in this config, and have been working fine to date. However now that I've been doing some digging, I see a lot of mentions that it's recommended that flow-control be disabled completely on 10 gigabit gear with NetApp. Since it's enabled on the filers, but not on the cluster switches, it's effectively off anyway, right? Or am I missing something? The switches see plenty of pause frames coming in from the filers, so it would appear they are wanting things to slow down. I'm wondering if I'm hitting some threshold on the filers that's causing this periodic packet loss. It's not associated with a specific port, so doesn't appear to be a specific optic burning out, and it's present regardless of using either or both switches. stats periodic only shows a GB or so passing over the net between these 8 x 6080s, and ops cluster wide are not that high at all, so I'm kinda stumped. I've dealt with plenty of bad optics in the past, and we usually run out of steam and the disk or head level, so these cluster net issues are new to me. My thought is to go ahead and try enabling flow control on the switches, but that seems to be recommended against. Any ideas?

2 2

Job Posting: Looking for someone in Canada
by Basil 24 Oct '14

24 Oct '14

As per Tom's email, I figured I'd reach out here. We're hiring a Netapp admin to work in Montreal, Canada. If you have questions or are interested, please email me.

1 0

SP Firmware Failing
by Steven Kreuzer 23 Oct '14

23 Oct '14

Hello- I have a 2240-2 and I am attempting to upgrade to SP firmware to version 2.2.2P2. I keep getting 'ERROR: Metadata absent in new package' when attempting to install the firmware. The filer I am testing on is running version 2.1, and I was able to upgrade it to version 2.1.3 without error. However, attempting to upgrade to 2.2, 2.2.1 or 2.2.2P2 are failing SP toaster> version Booted primary firmware version 2.1.3 Booted primary ACP version 01.10 Primary firmware version 2.1.3 Primary ACP version 01.10 Backup firmware version 2.1.3 Backup ACP version 01.10 SP toaster> sp update http://www/~steven/306-02160_A0_SP_2.2_SP_FW.tar.gz Downloading package... Uncompressing package... Unarchiving package... Inspecting firmware...ERROR: Metadata absent in new package Installing package... FW package install failed.....FAILED Cleaning up... ERROR : SP FW Update Unsuccessful. As far as I can tell, everything looks good in the firmware tarball $ tar -ztf 306-02160_A0_SP_2.2_SP_FW.tar.gz ./ ./RLM_FW/ ./RLM_FW/linux/ ./RLM_FW/linux/uImage ./RLM_FW/root-fs-image/ ./RLM_FW/root-fs-image/Root.bin ./RLM_FW/root-fs-image/Config.bin ./RLM_FW/uboot/ ./RLM_FW/uboot/u-boot.bin ./RLM_FW/uboot/secondary-u-boot.bin ./RLM_FW/uboot/tiny-rom.bin ./RLM_FW/install/ ./RLM_FW/install/Metadata ./RLM_FW/install/info.symlinks ./RLM_FW/install/post-install-script ./RLM_FW/install/checksum.regfiles.0 Has anyone seen this before? Thanks

4 5

storage / linux admin job
by Momonth 22 Oct '14

22 Oct '14

Hi, // sorry, if it's offtopic Is advertising jobs allowed here? I'd post more details if it's allowed. A company I work for looks for storage / linux sysadmin. Cheers, Vladimir

3 4

In place 32-64bit aggr upgrade
by Fred Grieco 22 Oct '14

22 Oct '14

Has anyone tried the priv set diag "aggr 64bit-upgrade start aggr1 -mode grow-all" command? I am entertaining doing this in 7 mode. Also, it says something about growing the volume. How much does it grow the volume by? TIA, Fred

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters October 2014