toasters November 2021

toasters@lists.teaparty.net

3 participants
3 discussions

wide open telnet on azure cluster interconnects
by Scott Eno 30 Nov '21

30 Nov '21

Hi, After running port scans we found that our Azure Cloud Volume ONTAP HA pairs are accessible via passwordless telnet over the cluster interfaces which normally would be on a private network connected to a cluster switch, or node-to-node in switchless config. These CVO HA pairs were built with Cloud Manager and it **should** have set up those interfaces to a private network instead of using the subnet provided to it for all the other accessible interfaces. No question here, just for everyone's info and discussion. If one telnet's to the IP of a cluster interconnect, port 8023, it drops you into the nodeshell with no authentication. I can't find an option to disable telnet and not sure if I should. Would anything break? I don't know. I figure the quickest solution is to set a deny for port 8023 on the NSG for the resource group, or worst case, try to figure out how to re-ip the cluster interconnects to a 169.. private network.

1 0

Re:
by Graham McGeown 21 Nov '21

21 Nov '21

Silly question, but in your 'vol move' command, are you using the constituent volume as the volume to move (e.g. the vol__001) and not the actual flexgroup name? Cheers Graham On Sat, 20 Nov 2021 at 11:05, Scott Eno via Toasters <toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Scott Eno <cse(a)hey.com> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Fri, 19 Nov 2021 22:01:52 -0500 > Subject: Encrypting Flexgroup vols with NAE > Hi, > > I had to move flexgroup vols from NSE disks to NAE aggrs once, so I know I > knew how to do this then, but for the life of me I can't find it written > down anywhere. > > Basically, how does one do a "vol move start ... -encrypt-with-aggr-key" > for a flexgroup with constituents on all four aggrs in the cluster (two on > each node)? TR-4571 (Hi Justin!) seems to say this is possible, tho the > doc it links to doesn't explain how to do this with a flexgroup. > > cse > > > > ---------- Forwarded message ---------- > From: Scott Eno via Toasters <toasters(a)teaparty.net> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Sat, 20 Nov 2021 03:01:57 GMT > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

3 3

Encrypting Flexgroup vols with NAE
by Scott Eno 20 Nov '21

20 Nov '21

Hi, I had to move flexgroup vols from NSE disks to NAE aggrs once, so I know I knew how to do this then, but for the life of me I can't find it written down anywhere. Basically, how does one do a "vol move start ... -encrypt-with-aggr-key" for a flexgroup with constituents on all four aggrs in the cluster (two on each node)? TR-4571 (Hi Justin!) seems to say this is possible, tho the doc it links to doesn't explain how to do this with a flexgroup. cse

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters November 2021