toasters February 2017

toasters@lists.teaparty.net

26 participants
19 discussions

AW: X1144A - No link
by Alexander Griesser 03 Apr '17

03 Apr '17

Hi Mike, Thanks, I had a similar issue with 1G copper SFPs in the past – but that doesn’t seem to apply here since the 40G ports are on an expansion slot and do not seem to be CNA capable: *> cna_flash update all NOTE: The flash update will take up to 30 minutes per update. (Current 2 chip(s) in the system) Do not interrupt power during the update, or you risk flash image corruption. Version (5.0.2) is the same in flash and file No update of flash is needed for port 0e. Version (5.0.2) is the same in flash and file No update of flash is needed for port 0g. -> While the expansion ports are in slot 2. Also, the upgrade to Ontap 9.1 did not solve the issue – will check the cables now when I’m in the datacenter. Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: Mike Gossett [mailto:cmgossett@gmail.com] Gesendet: Samstag, 28. Januar 2017 00:58 An: Alexander Griesser <AGriesser(a)anexia-it.com> Cc: tmac <tmacmd(a)gmail.com>; toasters(a)teaparty.net Betreff: Re: X1144A - No link Just a thought- I noticed that on a FAS2554, when trying to use 1G SFPs (copper) in the UTA ports, I had similar issues. I ended up having to apply a firmware update to the UTA2 system, IIRC, from maintenance mode. I have nothing that leads me to believe that is the case here, but it sounds somewhat close. The updated firmware was actually on the system with the code it shipped with, but needed to be manually applied. If all else fails, there's always a support ticket :) HTH Mike On Fri, Jan 27, 2017 at 7:39 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Those are optical cables, that got shipped with the card and the transceivers. According to HWU, those are the transceivers: << pic removed >> They look exactly like these and HWU calls them X65402. The connector looks exactly like the MPO connector which can also be seen in HWU and hast he cable number X66200-2 – so this is what I got: X1144A Adapter X65402 Transceivers X66200-2 Cables Should all play well with 9.1RC2 on the AFF-A300. Since 9.1 has already been released, I’ll upgrade this system to 9.1 and see if that changes anything – maybe there’s a reason why they call it RC ☺ Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 14:34 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link OK, a little confused now. Are you trying to use copper or optical? According to HWU, the X1144A as QSFP+ slots and the cable ends look identical to the SAS cables. The NetApp end should be any supported copper cable with a QSFP+ end or an optical transciever (X65402A, mfg 332-00389). The optical transciver will have the QSFP+ going into the filer and exposing the MPO end for your optical cable Since it looks like you are trying to use Optical, are you *sure* the optical transcivers are the right ones for that card? --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 8:14 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: That’s the 2-port 40G card with QSFPs and those funny new cables, no breakout cables. http://cdn3.bigcommerce.com/s-uiigcj2/product_images/uploaded_images/mtp-ca… Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 13:40 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link Curious...are you using it as a two-port 40Gb card or using the breakout cable? --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 7:13 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Good question – I’m using the QSFPs and the cables that came with the cards, so I’m positive that those should be supported. But I’m trying to find out. Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 13:04 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link what is the cable that you are using? Anything supported? [Inline image 1][Inline image 2] --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 5:16 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Hi, I’ve just installed those fancy X1144A cards in one of our AFF300 systems and it seems they’re getting recognized properly, but I’m not able to get a link on them. sysconfig says: slot 2: 40 Gigabit Ethernet Controller XL710 QSFP+ e2a MAC Address: 3c:fd:fe:a2:90:c8 (auto-unknown-down) e2e MAC Address: 3c:fd:fe:a2:90:c9 (auto-unknown-down) SAN01::> net port show -port e2* (network port show) Node: SAN01-01 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- e2a Default - down 1500 auto/10 - e2e Default - down 1500 auto/10 - Node: SAN01-02 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- e2a Default - down 1500 auto/10 - e2e Default - down 1500 auto/10 - 4 entries were displayed. For testing purposes, I did connect e2a on node1 to e2a on node 2 and I already tried exchanging the QSFPs and cables, but still no dice. Any idea what could be wrong here? According to HWU, the minimum required OS version is 9.1RC2, which is exactly what is installed currently: SAN01::> version NetApp Release 9.1RC2: Thu Nov 24 08:59:46 UTC 2016 Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 _______________________________________________ Toasters mailing list Toasters(a)teaparty.net<mailto:Toasters@teaparty.net> http://www.teaparty.net/mailman/listinfo/toasters _______________________________________________ Toasters mailing list Toasters(a)teaparty.net<mailto:Toasters@teaparty.net> http://www.teaparty.net/mailman/listinfo/toasters

4 4

NVMEM discharge FET off?
by Alexander Griesser 25 Feb '17

25 Feb '17

Hi, anyone ever had these? 2/25/2017 19:39:32 san01n01 EMERGENCY nvmem.battery.capLowCrit: The NVMEM battery capacity is critically low (0 cycles). To prevent data loss, the system will shut down in 20 minutes. 2/25/2017 17:43:26 san01n02 EMERGENCY nvmem.battery.discFET.off: The NVMEM battery discharge FET is off. To prevent data loss, the system will shut down in 5 minutes. 2/25/2017 17:32:26 san01n02 ALERT nvmem.battery.FET.off: The NVMEM battery charge FET is off. To prevent data loss, the system will shut down in 24 hours. 2/25/2017 17:29:27 san01n01 EMERGENCY nvmem.battery.capLowCrit: The NVMEM battery capacity is critically low (0 cycles). To prevent data loss, the system will shut down in 20 minutes. 2/25/2017 16:20:52 san01n01 EMERGENCY nvmem.battery.discFET.off: The NVMEM battery discharge FET is off. To prevent data loss, the system will shut down in 5 minutes. The system did not shut down and all `system health` related commands I'm aware of tell me, that everything is good. This is a brand new AFF A300, but it's been running since about a month now, so it's not been powered on today or anything like that which would rectify these messages sometimes. Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

WFA vs OnCommand API Services vs NMSDK vs ..
by Ehrenwald, Ian 25 Feb '17

25 Feb '17

Hello My coworkers would like to integrate volume-related tasks (creation, sizing, mounting, offlining, destroying) into their Salt-based automation/devops stack. They want to use a well documented REST interface if at all possible. I was asked to do some research into the best way for them to go about doing this and I think I'm more confused now vs when I started. NetApp has a handful of ways to skin this cat. I found: - NMSDK is really raw, and support for Python seems pretty weak compared to PowerShell or Perl. We'd basically have to roll our own "thing". Too much time and effort reinventing the wheel. - Some stuff on Github that kinda sorta might work, but was last updated years ago. - Workflow Automation, but that seems overkill and pricy for what the (current) requirements are. - ONTAP API Services which seems closest to what they want, but then gets tangled up in OCUM/OCPM? I guess this actually isn't a huge deal, as we do have OCUM 6.4P1 and OCPM 2.1.0P1 integrated together and looking at all of our clusters. What are other people doing for automation of various storage related tasks? Ian Ehrenwald Senior Infrastructure Engineer Hachette Book Group, Inc. 1.617.263.1948 / ian.ehrenwald(a)hbgusa.com This may contain confidential material. If you are not an intended recipient, please notify the sender, delete immediately, and understand that no disclosure or reliance on the information herein is permitted. Hachette Book Group may monitor email to and from our network.

4 4

Administrivia: twenty years old today
by Tom Yates 21 Feb '17

21 Feb '17

I apologise for adding to everyone's mailbox, but I noticed that this list is twenty years old today - on 21/2/1997 I initialised the list, which was then hosted at Mathworks, and run by majordomo. The 20th anniversary of the first post (which wasn't mine!) will be 5/3/2017 (that is, in about two weeks), but I won't be saying all this again. Many thanks to everyone who has shared so generously of their time and expertise over the years, helping other people on this list, and to Mathworks, who hosted it for most of the last two decades. Bonus thanks to Kendall Libby, who has co-moderated this list with me since the move to teaparty.net (and mailman). -- Tom Yates - http://www.teaparty.net

3 2

NFSv3 mount on NTFS volume on cDOT 9.0 - UID getting mapped to 65534
by Ray Van Dolson 20 Feb '17

20 Feb '17

Have an NTFS volume being shared out via NFSV3. SVM is part of AD and NIS. When an NIS-joined client lists directories under the export, everything seems to be mapped to UID 65534. I'm able to validate this: ::*> vserver security file-directory show -vserver file_ntfs -path /setup-staging/raytest_windows Vserver: file_ntfs File Path: /setup-staging/raytest_windows File Inode Number: 1317151 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - UNIX User Id: 65534 UNIX Group Id: 65534 UNIX Mode Bits: 777 UNIX Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0x8004 Owner:DOMAIN\rvandolson Group:DOMAIN\Domain Users DACL - ACEs ALLOW-Everyone-0x1f01ff-(Inherited) ALLOW-Everyone-0x10000000-OI|CI|IO (Inherited) However, the following makes me think the filer knows how to map AD usernames to Unix (NIS) usernames just fine: ::*> diag secd name-mapping show -vserver file_ntfs -direction win-unix -name DOMAIN\rvandolson -node red-str-napcl-p03-02 ATTENTION: Mapping of Data ONTAP "admin" users to UNIX user "root" is enabled, but the following information does not reflect this mapping. 'DOMAIN\rvandolson' maps to 'rvandolson' ::*> diag secd authentication translate -node red-str-napcl-p03-02 -vserver file_ntfs -unix-user-name rvandolson 580345 I don't have a default-win-user set: ::*> vserver nfs show -vserver file_ntfs -fields default-win-user vserver default-win-user --------- ---------------- file_ntfs (but I think the default is 65534). Shouldn't cDOT be returning 580345 for the UNIX User Id rather than 65534? Seems to be the case on 7-mode... Thanks! Ray

3 9

Running Cassandra on FAS
by Kalra, Manish 20 Feb '17

20 Feb '17

Does anyone has experience running Cassandra DB on Netapp All Flash Array. We are planning to deploy cassandra on Netapp AFF but everywhere I see online they discourage running Cassandra on shared storage. Any good/bad experiences you would like to share? Manish

1 0

Fwd: cDOT 9.1 , Netapp Volume encryption (NVE) and an external key management server.
by jordan slingerland 16 Feb '17

16 Feb '17

Based on this slide from the netapp university and the following doc, it looks to me like NVE is OKM only. Anyone have any information to support otherwise? https://library.netapp.com/ecm/ecm_download_file/ECMLP2572742 (my screenshot of university slide was blocked due to size) https://netapp.sabacloud.com/Saba/Web_spf/NA1PRD0047/common/leclassdetail/ regdw000000003193830 On one of the slides here in the 9.1 new features document it says "Federal Internet processing standards 140...level 2 compliance, NSE systems and external KMIP server still required) I take that to have the unfortunate meaning that NVE cannot be used with an external key management server. --Jordan

2 1

compute-reclaimable failing
by Ehrenwald, Ian 16 Feb '17

16 Feb '17

Hello Has anyone else run into an issue where a compute-reclaimable on a snapshot times out or fails after about 4 minutes of execution? I've tried this multiple times with the same result each execution. My-Cluster1::> volume snapshot compute-reclaimable -vserver MY_SVM -volume LARGE_FLEXVOL -snapshots SOME_BIG_OLD_SNAP Error: command failed: Cannot determine the status of Snapshot copy reclaimable operation on volume "LARGE_FLEXVOL" on Vserver "MY_SVM". If necessary, try the operation again. My-Cluster1::> The node the operation is running on is pretty hot in terms of CPU and disk and the volume the snapshot is part of is large (18t) and busy too in terms of IOPS, anywhere from 8K to 18K throughout the day. Am I hitting some sort of internal timeout for calculation? -- Ian Ehrenwald Senior Infrastructure Engineer Hachette Book Group, Inc. 1.617.263.1948 / ian.ehrenwald(a)hbgusa.com This may contain confidential material. If you are not an intended recipient, please notify the sender, delete immediately, and understand that no disclosure or reliance on the information herein is permitted. Hachette Book Group may monitor email to and from our network.

1 0

Fwd: cDOT 9.1 , Netapp Volume encryption (NVE) and an external key management server.
by jordan slingerland 15 Feb '17

15 Feb '17

Based on this slide from the netapp university and the following doc, it looks to me like NVE is OKM only. Anyone have any information to support otherwise? https://library.netapp.com/ecm/ecm_download_file/ECMLP2572742 [image: Inline image 2] On Wed, Feb 15, 2017 at 3:27 PM, Michael Bergman < michael.bergman(a)ericsson.com> wrote: > Sorry could not resist: Are you the rabbit or the fox in this...? :-) > /M > > > On 2017-02-15 21:22, jordan slingerland wrote: > >> I am just beginning to research a possible deployment of a new 9.1 system >> hoping to utilize NVE with an external key management server. It turns out >> the Onboard Key Manager does not appear to be FIPS compliant. >> >> I am not very far down this rabbit hole yet, but the documents I am >> reading >> so far only mention the Onboard Key Manager for use with NVE in 9.1 >> >> Could anyone (a) confirm the NVE feature is able to work with an external >> key management server and (b) recommend any that i might research. >> >> Thanks, >> Jordan >> > > -- > Michael Bergman > Sr Systems Analyst / Storage Architect michael.bergman(a)ericsson.com > Engineering Hub Stockholm Phone +46 10 7152945 > EMEA N, Operations North, IT Ops Kista SMS/MMS +46 70 5480835 > Ericsson Torshamnsg 33, 16480 Sthlm, Sweden > -- > This communication is confidential. We only send and receive email on the > basis of the terms set out at www.ericsson.com/email_disclaimer >

1 0

cDOT 9.1 , Netapp Volume encryption (NVE) and an external key management server.
by jordan slingerland 15 Feb '17

15 Feb '17

I am just beginning to research a possible deployment of a new 9.1 system hoping to utilize NVE with an external key management server. It turns out the Onboard Key Manager does not appear to be FIPS compliant. I am not very far down this rabbit hole yet, but the documents I am reading so far only mention the Onboard Key Manager for use with NVE in 9.1 Could anyone (a) confirm the NVE feature is able to work with an external key management server and (b) recommend any that i might research. Thanks, Jordan

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters February 2017