toasters April 2017

toasters@lists.teaparty.net

35 participants
22 discussions

RE: Windows NFS Client + cDOT
by Parisi, Justin 11 Apr '17

11 Apr '17

Well, access denied is definitely a different behavior than I was seeing. However, I was renaming files. When I rename a directory, I see the access issue: Z:\>ren "New Text Document.txt" test2.txt Z:\>ren "New folder" testdir Access is denied. Even when I change the access to 777, it still fails. # chmod 777 New\ folder [root@centos6 flexvol]# ls -la total 24 drwxrwxrwx. 5 root root 4096 Apr 11 09:41 . dr-xr-xr-x. 36 root root 4096 Apr 7 10:30 .. drwxrwxrwx. 2 root root 4096 Apr 11 09:39 New folder drwxr-xr-x. 2 root root 4096 Apr 11 09:41 New folder (2) drwxr-xr-x. 2 root root 4096 Apr 11 09:41 New folder (3) drwxrwxrwx. 10 root root 4096 Apr 11 09:05 .snapshot -rwxr-xr-x. 1 root root 0 Apr 10 15:45 test2.txt -rwxr-xr-x. 1 root root 0 Apr 10 15:46 test3.txt Z:\>ren "New folder" testdir Access is denied. So I dug around in our internal bug pages and found that if you don’t have showmount enabled, this can fail. So I enabled showmount on the NFS server and cleared the cache and remounted. Voila! ontap9-tme-8040::*> export-policy cache flush -vserver DEMO -cache all Warning: You are about to flush the "all (but showmount)" cache for Vserver "DEMO" on node "ontap9-tme-8040-02", which will result in increased traffic to the name servers. Do you want to proceed with flushing the cache? {y|n}: y ontap9-tme-8040::*> export-policy cache flush -vserver DEMO -cache showmount Warning: You are about to flush the "showmount" cache for Vserver "DEMO" on node "ontap9-tme-8040-02", which will result in increased traffic to the name servers. Do you want to proceed with flushing the cache? {y|n}: y C:\Users\Administrator>mount \\demo\flexvol Z: Z: is now successfully connected to \\demo\flexvol The command completed successfully. C:\Users\Administrator>Z: Z:\>ren "New folder (2)" testdir2 Z:\>dir Volume in drive Z has no label. Volume Serial Number is 80F0-372F Directory of Z:\ 04/11/2017 11:39 AM <DIR> . 04/11/2017 11:39 AM <DIR> .. 04/11/2017 09:41 AM <DIR> testdir2 04/10/2017 03:45 PM 0 test2.txt 04/10/2017 03:46 PM 0 test3.txt 04/11/2017 09:41 AM <DIR> New folder (3) 04/11/2017 09:39 AM <DIR> testdir 04/11/2017 11:05 AM <DIR> .snapshot 2 File(s) 24,576 bytes 6 Dir(s) 1,044,531,904,512 bytes free [cid:image003.png@01D2B2B9.E9D4FFB0] For completeness sake, I disabled showmount, cleared cache and remounted and saw it fail again: ontap9-tme-8040::*> nfs server modify -vserver DEMO -showmount disabled ontap9-tme-8040::*> export-policy cache flush -vserver DEMO -cache showmount Warning: You are about to flush the "showmount" cache for Vserver "DEMO" on node "ontap9-tme-8040-02", which will result in increased traffic to the name servers. Do you want to proceed with flushing the cache? {y|n}: y C:\Users\Administrator>umount X: Disconnecting X: \\10.193.67.237\flexvol The command completed successfully. C:\Users\Administrator>mount \\10.193.67.237\flexvol X: X: is now successfully connected to \\10.193.67.237\flexvol The command completed successfully. C:\Users\Administrator>X: X:\>dir Volume in drive X has no label. Volume Serial Number is 80F0-372F Directory of X:\ 04/11/2017 11:47 AM <DIR> . 04/11/2017 11:47 AM <DIR> .. 04/11/2017 09:39 AM <DIR> testdir2 04/10/2017 03:45 PM 0 test2.txt 04/10/2017 03:46 PM 0 test3.txt 04/11/2017 09:41 AM <DIR> New folder (3) 04/11/2017 09:41 AM <DIR> testdir 04/11/2017 11:05 AM <DIR> .snapshot 2 File(s) 24,576 bytes 6 Dir(s) 1,044,531,773,440 bytes free X:\>ren testdir testdirnew Access is denied. Looks like I’ll be adding that to the TR. ☺ From: Alexander Griesser [mailto:AGriesser@anexia-it.com] Sent: Tuesday, April 11, 2017 3:16 AM To: Parisi, Justin <Justin.Parisi(a)netapp.com>; NGC-tmacmd-gmail.com <tmacmd(a)gmail.com> Cc: toasters(a)teaparty.net Subject: AW: Windows NFS Client + cDOT Be glad that this hotfix did not install on your system – I’ve installed it on one test machine with 2k12 R2 and now it’s giving me BSODs after establishing either a remote session or logging in on the console in nfsrdr.sys, so this hotfix does not work at all I guess. Regarding the command line renaming: I’ve tried that initially and have sent the results earlier, you must have missed that. I’m unable to rename the files on the command line either, getting „Access denied“, here’s the quote again: On the command line, a different error (Access denied) is given: Z:\>move test test1 Access is denied. 0 dir(s) moved. Z:\>ren test test1 Access is denied. Any idea what I’m missing here now? Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Gesendet: Montag, 10. April 2017 22:29 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>>; NGC-tmacmd-gmail.com <tmacmd(a)gmail.com<mailto:tmacmd@gmail.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: RE: Windows NFS Client + cDOT Ok, started playing around with this today. This is my mount: Z:\>mount Local Remote Properties ------------------------------------------------------------------------------- Z: \\demo\flexvol<file://demo/flexvol> UID=0, GID=0 rsize=65536, wsize=65536 mount=hard, timeout=0.8 retry=1, locking=yes fileaccess=755, lang=ANSI casesensitive=no sec=sys When I try to rename via the GUI, I get this: [cid:image001.png@01D2B2A3.B085FC70] Via CLI, I get this: Z:\>ren "New Text Document (2).txt" test.txt Z:\>dir Volume in drive Z has no label. Volume Serial Number is 80F0-372F Directory of Z:\ 04/10/2017 03:49 PM <DIR> . 04/10/2017 03:49 PM <DIR> .. 04/10/2017 03:45 PM 0 New Text Document.txt 04/10/2017 03:46 PM 0 test.txt 04/10/2017 03:45 PM <DIR> .snapshot 2 File(s) 12,288 bytes 3 Dir(s) 1,044,535,574,528 bytes free A search for “invalid device” gets me this: https://support.microsoft.com/en-us/help/3025097/-invalid-device-error-when… I tried to apply it to my server, but it claims it’s not valid for Windows 2012R2, even though it’s specifically for Win 2012R2. ¯\_(ツ)_/¯ Packet traces and sktraces on the cluster suggest the issue isn’t on the cluster side; the rename request never happens from the client: [cid:image002.png@01D2B2A3.B085FC70] Does it fail for you the same way? Does rename work from CLI? On my end, at least, this seems to be a client issue. From: Alexander Griesser [mailto:AGriesser@anexia-it.com] Sent: Monday, April 10, 2017 4:26 AM To: NGC-tmacmd-gmail.com <tmacmd(a)gmail.com<mailto:tmacmd@gmail.com>> Cc: Parisi, Justin <Justin.Parisi(a)netapp.com<mailto:Justin.Parisi@netapp.com>>; toasters(a)teaparty.net<mailto:toasters@teaparty.net> Subject: AW: Windows NFS Client + cDOT Hey everyone, we’ve just set up a Windows 2k12 system and the renaming of files and folders doesn’t work there too, so it’s not a Windows 2016 problem. Any further ideas on how to debug this issue? Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: Alexander Griesser Gesendet: Freitag, 7. April 2017 20:30 An: 'tmac' <tmacmd(a)gmail.com<mailto:tmacmd@gmail.com>> Cc: Parisi, Justin <Justin.Parisi(a)netapp.com<mailto:Justin.Parisi@netapp.com>>; toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: AW: Windows NFS Client + cDOT Yes, I’ve set anon in the export policy for the volume it self to 0 and I’ve set the registry keys on windows for AnonymousUID and AnonymousGID to 0 – without the registry keys, it will be „-2“ on the mount options in windows, whatever that negative value is used for… If the permissions were wrong, I could not create files at all in the first place, I guess, right? But I can create them and they show as UID 0 on the filer (also tested on a linux system where I mounted this volume) – and I can delete the files as well. The only thing which is not working, is renaming and I’m not sure why it’s refusing to do so. Maybe this is a Win 2k16 thinggie? I can try to spin up a Win2k12 system to see if this problem also persists there, that would at least rule out a misconfiguration on the filer I guess. I did not create separate policies for the SVM root, the SVM root only gets applied the default policy here and the default policy iss et to „ro all“, „rw never“ – as you can see below. Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com] Gesendet: Freitag, 7. April 2017 20:24 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: Parisi, Justin <Justin.Parisi(a)netapp.com<mailto:Justin.Parisi@netapp.com>>; toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: Windows NFS Client + cDOT Not sure if this is it or not, but you have said that you set the anon ID's to 0. In this policy, it is set to 65535 Do you create separate policies for the SVM root and the data volumes? If you do, Root could/should be allow RO to all, rw to none. Then set the restrictions on the data volume policy. --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Apr 7, 2017 at 2:19 PM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Well, there are like 70 export policies on this SVM for 70 different volumes, I guess the policy for this volume as well as the default policy for the SVM will suffice here? If so, the export policy for this volume has already been sent earlier and here’s the default policy for this SVM: ::> export-policy rule show -vserver XXXXXXX -policyname default -instance Vserver: XXXXXXX Policy Name: default Rule Index: 1 Access Protocol: nfs List of Client Match Hostnames, IP Addresses, Netgroups, or Domains: 0/0 RO Access Rule: any RW Access Rule: never User ID To Which Anonymous Users Are Mapped: 65535 Superuser Security Types: none Honor SetUID Bits in SETATTR: true Allow Creation of Devices: true Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 7. April 2017 20:15 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: Parisi, Justin <Justin.Parisi(a)netapp.com<mailto:Justin.Parisi@netapp.com>>; toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: Windows NFS Client + cDOT yes, yes.. export policy rule show -instance (please) --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/>

1 0

upgrade help
by Scott Classen 10 Apr '17

10 Apr '17

Hello Toaster, I'm running into a problem downloading the 9.1 ONTAP image file to my filer. I've issued the following command netapp1::> cluster image package get -url http://my.webserver.gov/netapp/91_q_image.tgz Software get http://my.webserver.gov/netapp/91_q_image.tgz started on node netapp1-01 Downloading package. This may take up to 10 minutes. There is no update/install in progress Status of most recent operation: Run Status: Working Exit Status: Success Phase: Download Exit Message: Processing Package. Process package failed. Error: command failed: Error in processing the package, make sure the package version and URL are correct. netapp1::> I've submitted a help request ticket on mysupport.netapp.com <http://mysupport.netapp.com/> website, but not much useful help has been forthcoming yet. I've also tried using the OnCommand Web UI and receive a similar error. "Failed to add the software image to the cluster. Verify if the image and the specified URL are valid and ensure that there is sufficient space in the system management storage area." The url is valid. The tgz file has the correct md5sum. I'm sure this is something simple, but I'm not having any luck. Thanks, Scott ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scott Classen, Ph.D. SIBYLS Beamline 12.3.1 sibyls.als.lbl.gov Advanced Light Source Lawrence Berkeley National Laboratory 1 Cyclotron Rd MS6R2100 Berkeley, CA 94720 mobile 510.206.4418 desk 510.495.2697 beamline 510.495.2134 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 3

Windows NFS Client + cDOT
by Alexander Griesser 10 Apr '17

10 Apr '17

Hey there, is it still true that Windows' integrated NFS client is unable to mount NFS shares from cDOT systems? Just asking because I was trying to do so again today out of curiosity and failed miserably again. If this is still the case, can anyone recommend alternative NFS clients for windows? Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

3 12

Switching to ACP inband connectivity
by Alexander Griesser 08 Apr '17

08 Apr '17

Hey Toasters, I've just upgraded one of my HA-pairs to 9.1P2 and wanted to switch to ACP inband connectivity following this KB: https://kb.netapp.com/support/s/article/ka31A00000012NsQAI/in-band-acp-setu… According to this KB, I should be eligible for the switch: ::*> storage shelf acp module show -fields module-name,protocol-version,firmware-version,shelf-serial-number,iom-type,state node module-name protocol-version firmware-version shelf-serial-number iom-type state ------- ----------- ---------------- ---------------- ------------------- -------- ------ nodeA 1.22.B 1.2.02.10 02.10 SHJMS1424000060 iom6 active nodeA 1.22.A 1.2.02.10 02.10 SHJMS1424000060 iom6 active nodeA 2.11.A 1.2.02.10 02.10 SHFMS1423000507 iom6 active nodeA 2.11.B 1.2.02.10 02.10 SHFMS1423000507 iom6 active nodeA 2.14.B 1.2.02.10 02.10 SHFMS1423000491 iom6 active nodeA 2.14.A 1.2.02.10 02.10 SHFMS1423000491 iom6 active nodeA 2.12.A 1.2.02.10 02.10 SHFMS1423000493 iom6 active nodeA 2.12.B 1.2.02.10 02.10 SHFMS1423000493 iom6 active nodeA 2.13.A 1.2.02.10 02.10 SHFMS1423000504 iom6 active nodeA 2.13.B 1.2.02.10 02.10 SHFMS1423000504 iom6 active nodeA 1.21.B 1.2.02.10 02.10 SHJMS1424000434 iom6 active nodeA 1.21.A 1.2.02.10 02.10 SHJMS1424000434 iom6 active nodeB 1.22.B 1.2.02.10 02.10 SHJMS1424000060 iom6 active nodeB 1.22.A 1.2.02.10 02.10 SHJMS1424000060 iom6 active nodeB 2.11.A 1.2.02.10 02.10 SHFMS1423000507 iom6 active nodeB 2.11.B 1.2.02.10 02.10 SHFMS1423000507 iom6 active nodeB 2.14.B 1.2.02.10 02.10 SHFMS1423000491 iom6 active nodeB 2.14.A 1.2.02.10 02.10 SHFMS1423000491 iom6 active nodeB 2.12.A 1.2.02.10 02.10 SHFMS1423000493 iom6 active nodeB 2.12.B 1.2.02.10 02.10 SHFMS1423000493 iom6 active nodeB 2.13.A 1.2.02.10 02.10 SHFMS1423000504 iom6 active nodeB 2.13.B 1.2.02.10 02.10 SHFMS1423000504 iom6 active nodeB 1.21.B 1.2.02.10 02.10 SHJMS1424000434 iom6 active nodeB 1.21.A 1.2.02.10 02.10 SHJMS1424000434 iom6 active 24 entries were displayed. The requirements state that the IOM6 modules must be upgraded to 2.09 (I have 2.10) and ACP firmware must be at least 1.2.2.9 (I have 1.2.2.10). So I went ahead and ran this command: storage shelf acp configure -is-enabled true -channel in-band After a few minutes, I saw this: ::*> storage shelf acp show Node Channel Connectivity ------------------ --------------- ---------------------- nodeA in-band active nodeB in-band active 2 entries were displayed. But when I ran the initial check command again, I saw this output: ::*> storage shelf acp module show -fields module-name,protocol-version,firmware-version,shelf-serial-number,iom-type,state node module-name protocol-version firmware-version shelf-serial-number iom-type state ------- ----------- ---------------- ---------------- ------------------- -------- ------------------------ nodeA 1.22.B 1.2.02.10 02.10 SHJMS1424000060 iom6 firmware-update-required nodeA 1.22.A 1.2.02.10 02.10 SHJMS1424000060 iom6 firmware-update-required nodeA 2.11.A 1.2.02.10 02.10 SHFMS1423000507 iom6 firmware-update-required nodeA 2.11.B 1.2.02.10 02.10 SHFMS1423000507 iom6 firmware-update-required nodeA 2.14.B 1.2.02.10 02.10 SHFMS1423000491 iom6 firmware-update-required nodeA 2.14.A 1.2.02.10 02.10 SHFMS1423000491 iom6 firmware-update-required nodeA 2.12.A 1.2.02.10 02.10 SHFMS1423000493 iom6 firmware-update-required nodeA 2.12.B 1.2.02.10 02.10 SHFMS1423000493 iom6 firmware-update-required nodeA 2.13.A 1.2.02.10 02.10 SHFMS1423000504 iom6 firmware-update-required nodeA 2.13.B 1.2.02.10 02.10 SHFMS1423000504 iom6 firmware-update-required nodeA 1.21.B 1.2.02.10 02.10 SHJMS1424000434 iom6 firmware-update-required nodeA 1.21.A 1.2.02.10 02.10 SHJMS1424000434 iom6 firmware-update-required nodeB 1.22.B 1.2.02.10 02.10 SHJMS1424000060 iom6 firmware-update-required nodeB 1.22.A 1.2.02.10 02.10 SHJMS1424000060 iom6 firmware-update-required nodeB 2.11.A 1.2.02.10 02.10 SHFMS1423000507 iom6 firmware-update-required nodeB 2.11.B 1.2.02.10 02.10 SHFMS1423000507 iom6 firmware-update-required nodeB 2.14.B 1.2.02.10 02.10 SHFMS1423000491 iom6 firmware-update-required nodeB 2.14.A 1.2.02.10 02.10 SHFMS1423000491 iom6 firmware-update-required nodeB 2.12.A 1.2.02.10 02.10 SHFMS1423000493 iom6 firmware-update-required nodeB 2.12.B 1.2.02.10 02.10 SHFMS1423000493 iom6 firmware-update-required nodeB 2.13.A 1.2.02.10 02.10 SHFMS1423000504 iom6 firmware-update-required nodeB 2.13.B 1.2.02.10 02.10 SHFMS1423000504 iom6 firmware-update-required nodeB 1.21.B 1.2.02.10 02.10 SHJMS1424000434 iom6 firmware-update-required nodeB 1.21.A 1.2.02.10 02.10 SHJMS1424000434 iom6 firmware-update-required 24 entries were displayed. Out of curiosity, I tried to run the ACP update again: nodeB> storage download acp Downloading ACP firmware can take several minutes and will not disrupt client access during that time. However, normal ACP recovery capabilities will not be available while the firmware upgrade is in progress. Are you sure you want to continue with ACP processor firmware update? y [storage download acp] Firmware will not be downloaded to module 2b.14.B as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0a.14.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0b.21.B as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0a.13.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0a.12.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 2a.21.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 2b.12.B as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 2b.13.B as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0b.22.B as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 2a.22.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 0a.11.A as ACPP state is not active, Current ACPP state is 0x9. [storage download acp] Firmware will not be downloaded to module 2b.11.B as ACPP state is not active, Current ACPP state is 0x9. nodeB> exit Eventlog also said, that a FW Upgrade is required: ::*> event log show -severity infORMATIONAL Time Node Severity Event ------------------- ---------------- ------------- --------------------------- 4/8/2017 11:41:15 nodeB INFORMATIONAL sfu.firmwareUpToDate: Firmware is up-to-date on all disk shelves. 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000507). 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000504). 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000491). 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000493). 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHJMS1424000060). 4/8/2017 11:39:37 nodeA INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHJMS1424000434). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000493). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000504). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000507). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHFMS1423000491). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHJMS1424000434). 4/8/2017 11:39:37 nodeB INFORMATIONAL acp.need.firmware.update: ACP module (NA) needs a firmware upgrade, (disk shelf serial number: SHJMS1424000060). I then switched back to OOB connectivity, and all is good again: ::*> storage shelf acp show Node Channel Connectivity ------------------ --------------- ---------------------- nodeA out-of-band full-connectivity nodeB out-of-band full-connectivity 2 entries were displayed. Tried to run the ACP upgrade again, getting this: nodeB> storage download acp Downloading ACP firmware can take several minutes and will not disrupt client access during that time. However, normal ACP recovery capabilities will not be available while the firmware upgrade is in progress. Are you sure you want to continue with ACP processor firmware update? y [storage download acp] ACP will check 12 modules for firmware download. [storage download acp] ACP module 192.168.0.124 is not eligible for update. [storage download acp] ACP module 192.168.0.126 is not eligible for update. [storage download acp] ACP module 192.168.0.180 is not eligible for update. [storage download acp] ACP module 192.168.0.202 is not eligible for update. [storage download acp] ACP module 192.168.0.208 is not eligible for update. [storage download acp] ACP module 192.168.0.248 is not eligible for update. [storage download acp] ACP module 192.168.1.112 is not eligible for update. [storage download acp] ACP module 192.168.1.170 is not eligible for update. [storage download acp] ACP module 192.168.1.238 is not eligible for update. [storage download acp] ACP module 192.168.2.66 is not eligible for update. [storage download acp] ACP module 192.168.3.130 is not eligible for update. [storage download acp] ACP module 192.168.3.138 is not eligible for update. nodeB> exit And now I'm back at the starting point. Any ideas what's going on here? Why does it tell me "firmware-update-required" when I'm already on the latest versions? Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

2 2

8.2 -> 8.3 cDOT upgrade
by John Stoffel 06 Apr '17

06 Apr '17

Guys, I'm in the planning and setup phase of a four node cDOT 8.2 to 8.3.x upgrade. One thing I need to do is setup all the admin LIFs for my VServers. I've got a bunch of them already, but some have data protocols enabled, and I don't think I can nuke them without alot of hassle. Is there a way under 8.2.3pX to see if a particular LIF is seeing traffic over a particular data protocol? For example, my 'foo' VServer have some LIFs, which have varying data protocols: vserver lif data-protocol -------- ----- ------------- foo admin none foo lif1 nfs foo lif2 nfs,cifs,fcache foo lif3 nfs,cifs,fcache foo lif4 nfs,cifs,fcache Can I see if lifs2-4 have CIFS traffic or not? I've been poking around, but it's not any thing obvious. In the grand scheme of things, I could just rename the probablematic LIFs to some other name and setup new 'admin' LIFs as required. And I do realize they're not required to be call 'admin', it's just a help. Thanks, John

2 3

7-Mode End of Support dates ?
by John Adams 06 Apr '17

06 Apr '17

Hello, I was recently told by NetApp that 8.2 is End of Support on 7/31/2017. Isn't 8.2.4 the last 7-mode version of On-Tap? Does this mean that 7-Mode is completely unsupported as of 7/31/2017? Is there currently a mad rush to convert from 7-Mode to clustered that I'm not aware of ? Thanks.

5 4

ONTAP 9 -- Full Disk Encryption (FDE)
by Eric Peng 05 Apr '17

05 Apr '17

Last year, we acquired an all-flash FAS array (AFF8040) for POC. While this array supports the FDE feature (via SafeNet), the POC requirements did not require us to enable this. As it sometimes goes, POC is potentially turning into "production" and we are currently taking a look at options to see if it makes sense to convert the POC into an actual purchase. Am hoping some of you may have a bit of experience with enabling FDE encryption on an array *after* data already exists on an array. Basically, need to know if the existing data can safely remain on the disks if FDE feature is to be introduced now? I've only come across a piece of NetApp marketing literature that indicates this should be non-disruptive, while the technical whitepapers focus on the nuts and bolts of "how to enable FDE". Can anyone share definitively whether we must first enable FDE on an array that has SED disks, or whether it is actually safe to introduce FDE on the array after it has been put into use? Would like to avoid having to migrate off the data and re-configure the array/cluster if I can. Thanks, Eric Peng | Enterprise Storage Engineer Esri | 380 New York St. | Redlands, CA 92373 | USA T 909 793 2853 x3567 | M 909 367 1691 epeng(a)esri.com<mailto:epeng@esri.com> | esri.com<http://esri.com/>

3 7

NFS Export Policy
by Daniel Taylor 05 Apr '17

05 Apr '17

Hello, We have an volume with an export policy applied: volA = policy1 The policy has client match rules for the ESXi hosts. However when we try and add this volume to an ESXi host we get an error saying mount request denied. If we add a rule to the default export policy within the same SVM the volume is then added without issue. Similarly if we apply 'policy1' to the root volume in the associated SVM we are able to mount 'volA' on the ESXi hosts. Doesn't this kind of defeat the object of having an export policy associated with the volume if the underlying root volume controls the export access? Or is this a bug? We are running 9.1P1. Thanks

5 5

Deswizzle: How far behind is it??
by Jeffrey Mohler 04 Apr '17

04 Apr '17

Is there a way to tell how many snapmirror updates behind deswizzle is? _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712 YPAC Gold Member Twitter: @PrincipalYahoo CorpIM: Hipchat & Iris

3 2

AW: X1144A - No link
by Alexander Griesser 03 Apr '17

03 Apr '17

Hi Mike, Thanks, I had a similar issue with 1G copper SFPs in the past – but that doesn’t seem to apply here since the 40G ports are on an expansion slot and do not seem to be CNA capable: *> cna_flash update all NOTE: The flash update will take up to 30 minutes per update. (Current 2 chip(s) in the system) Do not interrupt power during the update, or you risk flash image corruption. Version (5.0.2) is the same in flash and file No update of flash is needed for port 0e. Version (5.0.2) is the same in flash and file No update of flash is needed for port 0g. -> While the expansion ports are in slot 2. Also, the upgrade to Ontap 9.1 did not solve the issue – will check the cables now when I’m in the datacenter. Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: Mike Gossett [mailto:cmgossett@gmail.com] Gesendet: Samstag, 28. Januar 2017 00:58 An: Alexander Griesser <AGriesser(a)anexia-it.com> Cc: tmac <tmacmd(a)gmail.com>; toasters(a)teaparty.net Betreff: Re: X1144A - No link Just a thought- I noticed that on a FAS2554, when trying to use 1G SFPs (copper) in the UTA ports, I had similar issues. I ended up having to apply a firmware update to the UTA2 system, IIRC, from maintenance mode. I have nothing that leads me to believe that is the case here, but it sounds somewhat close. The updated firmware was actually on the system with the code it shipped with, but needed to be manually applied. If all else fails, there's always a support ticket :) HTH Mike On Fri, Jan 27, 2017 at 7:39 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Those are optical cables, that got shipped with the card and the transceivers. According to HWU, those are the transceivers: << pic removed >> They look exactly like these and HWU calls them X65402. The connector looks exactly like the MPO connector which can also be seen in HWU and hast he cable number X66200-2 – so this is what I got: X1144A Adapter X65402 Transceivers X66200-2 Cables Should all play well with 9.1RC2 on the AFF-A300. Since 9.1 has already been released, I’ll upgrade this system to 9.1 and see if that changes anything – maybe there’s a reason why they call it RC ☺ Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 14:34 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link OK, a little confused now. Are you trying to use copper or optical? According to HWU, the X1144A as QSFP+ slots and the cable ends look identical to the SAS cables. The NetApp end should be any supported copper cable with a QSFP+ end or an optical transciever (X65402A, mfg 332-00389). The optical transciver will have the QSFP+ going into the filer and exposing the MPO end for your optical cable Since it looks like you are trying to use Optical, are you *sure* the optical transcivers are the right ones for that card? --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 8:14 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: That’s the 2-port 40G card with QSFPs and those funny new cables, no breakout cables. http://cdn3.bigcommerce.com/s-uiigcj2/product_images/uploaded_images/mtp-ca… Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 13:40 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link Curious...are you using it as a two-port 40Gb card or using the breakout cable? --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 7:13 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Good question – I’m using the QSFPs and the cables that came with the cards, so I’m positive that those should be supported. But I’m trying to find out. Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 Von: tmac [mailto:tmacmd@gmail.com<mailto:tmacmd@gmail.com>] Gesendet: Freitag, 27. Januar 2017 13:04 An: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters(a)teaparty.net<mailto:toasters@teaparty.net> Betreff: Re: X1144A - No link what is the cable that you are using? Anything supported? [Inline image 1][Inline image 2] --tmac Tim McCarthy, Principal Consultant Proud Member of the #NetAppATeam<https://twitter.com/NetAppATeam> I Blog at TMACsRack<https://tmacsrack.wordpress.com/> On Fri, Jan 27, 2017 at 5:16 AM, Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Hi, I’ve just installed those fancy X1144A cards in one of our AFF300 systems and it seems they’re getting recognized properly, but I’m not able to get a link on them. sysconfig says: slot 2: 40 Gigabit Ethernet Controller XL710 QSFP+ e2a MAC Address: 3c:fd:fe:a2:90:c8 (auto-unknown-down) e2e MAC Address: 3c:fd:fe:a2:90:c9 (auto-unknown-down) SAN01::> net port show -port e2* (network port show) Node: SAN01-01 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- e2a Default - down 1500 auto/10 - e2e Default - down 1500 auto/10 - Node: SAN01-02 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- e2a Default - down 1500 auto/10 - e2e Default - down 1500 auto/10 - 4 entries were displayed. For testing purposes, I did connect e2a on node1 to e2a on node 2 and I already tried exchanging the QSFPs and cables, but still no dice. Any idea what could be wrong here? According to HWU, the minimum required OS version is 9.1RC2, which is exactly what is installed currently: SAN01::> version NetApp Release 9.1RC2: Thu Nov 24 08:59:46 UTC 2016 Best, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 _______________________________________________ Toasters mailing list Toasters(a)teaparty.net<mailto:Toasters@teaparty.net> http://www.teaparty.net/mailman/listinfo/toasters _______________________________________________ Toasters mailing list Toasters(a)teaparty.net<mailto:Toasters@teaparty.net> http://www.teaparty.net/mailman/listinfo/toasters

4 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters April 2017