toasters

toasters@lists.teaparty.net

13531 discussions

Re: please provide the complete steps for creating new lacp ports..
by Yuvaraja Shivaram 11 Mar '19

11 Mar '19

Hi Chris and All, cluster::> vlan show Network Network Node VLAN Name Port VLAN ID MAC Address ------ --------- ------- -------- ----------------- cluster-01 a0a-608 a0a 608 xxxx cluster-02 a0a-608 a0a 608 xxxx cluster::> broadcast-domain show (network port broadcast-domain show) IPspace Broadcast Update Name Domain Name MTU Port List Status Details ------- ----------- ------ ----------------------------- -------------- Default 10G_Data 9000 cluster-02:a0a-608 complete cluster-01:a0a-608 complete cluster::> failover-groups show (network interface failover-groups show) Failover Vserver Group Targets ---------------- ---------------- -------------------------------------------- cluster 10G_Data cluster-02:a0a-608, cluster-01:a0a-608 cluster::> net port show (network port show) Node: cluster-01 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- a0a Default - up 9000 auto/- healthy a0a-608 Default 10G_Data up 9000 auto/- healthy Node: cluster-02 Speed(Mbps) Health Port IPspace Broadcast Domain Link MTU Admin/Oper Status --------- ------------ ---------------- ---- ---- ----------- -------- a0a Default - up 9000 auto/- healthy a0a-608 Default 10G_Data up 9000 auto/- healthy bng-engodcdata1::> net int show (network interface show) vserver1 lif_data1 up/up xxxx_ip cluster-01 a0a-608 true lif_data2 up/up xxxx_ip cluster-02 a0a-608 true vserver_mgmt up/up xxxx_ip cluster-01 a0a-608 true ==============================================All the above inputs are already confiugred for a0a interface group(e0c,e0d ports) and currently it is using for production... Below are the steps to configure new interface group e0e, e0f with the interface group name as "a0b...." 1>using same vlan of 608 (which is already used in a0a interface.....) 2>broadcast domain and failover groups i would use the same one which is already using by the a0a interface group....... cluster-1::>net port ifgrp create –node cluster-01 –ifgrp a0b -distr-func ip -mode multimode_lacp cluster-1::>net port ifgrp create –node cluster-02 –ifgrp a0b -distr-func ip -mode multimode_lacp cluster-1::> network port ifgrp add-port -node cluster-01 -ifgrp a0b -port e0e cluster-1::> network port ifgrp add-port -node cluster-01 -ifgrp a0b -port e0f cluster-1::> network port ifgrp add-port -node cluster-02 -ifgrp a0b -port e0e cluster-1::> network port ifgrp add-port -node cluster-02 -ifgrp a0b -port e0f cluster-1::>net port modify –node cluster-01 –port a0b–mtu 9000 cluster-1::>net port modify –node cluster-02 –port a0b–mtu 9000 cluster-1::>net port vlan create –node cluster-01 –vlan-name a0b-608 (need to chk on this as vlan-add or vlan add is not coming) cluster-1::>net port vlan create –node cluster-02 –vlan-name a0b-608 so above step would take automatically vlan id and port details without causing any issue to already configured vlan id of a0a-608 right ? adding ports to broadcast domain 10G_data..which is already using by a0a ifgrp cluster-1::>network port broadcast-domain add-ports -broadcast-domain 10G_Data -ports cluster-01:a0b-608, cluster-02:a0b-608 -ipspace Default adding failover-groups to 10G_Data(which is already using by a0a ifgrp) cluster-1::>failover-groups add-targets -vserver cluster -failover-group 10G_Data -targets cluster-02:a0b-708, cluster-01:a0b-708 then i would create , vserver02 and respective lifs by using a0b-608 interface group..... Please let me know if anything to be added..and can we use the current broadcast domain and failover groups to configure new interface group of a0b ? or it should have it's own ? Regards raj.. On Fri, Mar 8, 2019 at 4:41 PM Yuvaraja Shivaram <yuvaraja.kishan(a)gmail.com> wrote: > I just logged out, > > Will send the complete plan, along with commands may be tomorrow, plz > help me if anything wrong in that > > Regards > Raj > > On Fri, Mar 8, 2019 at 4:16 PM Chris Hague <Chris_Hague(a)ajg.com> wrote: > >> Why not add the other 2 ports to your existing a0a ifgrp? >> >> >> >> To answer your question, if you have already created your a0b ifgrp, >> adding a vlan (vlan create a0b-608) is non-disruptive. >> >> >> >> *From:* toasters-bounces(a)teaparty.net <toasters-bounces(a)teaparty.net> *On >> Behalf Of *Yuvaraja Shivaram >> *Sent:* 08 March 2019 10:36 >> *To:* Alexander Griesser <AGriesser(a)anexia-it.com> >> *Cc:* toasters <toasters(a)teaparty.net> >> *Subject:* Re: please provide the complete steps for creating new lacp >> ports.. >> >> >> >> very good question...Alexander, >> >> >> >> earlier we were using only 2 ports, leaving other 2 ports keeping idle, >> so we are configuring other 2 ports and configuring LACP out of it,,,as of >> now do not have any plan to use any other vlan id's other than 608, ,which >> is already functional in the interface group as a0a, so now that same vlan >> id can be used for the new interface group a0b...? will that create any >> outage (since i am not getting vlan add..options similar to 7mode)... >> >> >> >> Regards >> >> Raj, >> >> >> >> >> >> On Fri, Mar 8, 2019 at 3:54 PM Alexander Griesser < >> AGriesser(a)anexia-it.com> wrote: >> >> Hey, >> >> >> >> why do you want to have the same VLAN on two different interface groups? >> >> >> >> *Alexander Griesser* >> >> Head of Systems Operations >> >> >> >> ANEXIA Internetdienstleistungs GmbH >> >> >> >> E-Mail: AGriesser(a)anexia-it.com >> >> Web: http://www.anexia-it.com >> >> >> >> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt >> >> Geschäftsführer: Alexander Windbichler >> >> Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT >> U63216601 >> >> >> >> *From:* toasters-bounces(a)teaparty.net <toasters-bounces(a)teaparty.net> *On >> Behalf Of *Yuvaraja Shivaram >> *Sent:* Friday, March 8, 2019 11:22 AM >> *To:* toasters <toasters(a)teaparty.net> >> *Subject:* please provide the complete steps for creating new lacp >> ports.. >> >> >> >> Hi All, >> >> >> >> Is there any way to add vlan to existing vlan-id, just how we do at >> 7mode... >> >> >> >> curretly we are using 9.4p1 cmode.... >> >> >> >> below vlan already exists....so now if i want to create a0b for the same >> vlan id 608, am not getting vlan add here, so.. >> >> >> >> if i use ,network port vlan create -node cluster-01 -vlan-name >> a0b-608... is there any outage to this id 608, which is already running in >> production...? >> >> >> >> Network Network >> >> Node VLAN Name Port VLAN ID MAC Address >> >> ------ --------- ------- -------- ----------------- >> >> cluster-01 >> >> a0a-608 >> >> a0a 608 xxxx >> >> cluster-02 >> >> a0a-608 >> >> a0a 608 xxxx >> >> >> >> >> This email is being sent by a subsidiary of Arthur J. Gallagher Holdings >> (UK) Limited, part of the Arthur J. Gallagher & Co. global group of >> companies. For details of the registered office, company number and, where >> applicable, regulated status of our subsidiaries, please visit >> https://www.ajginternational.com/legal-regulatory-information/. >> >> We are the data controller of any personal information you provide to us >> or personal information that has been provided to us by a third party. We >> collect and process information about you in order to arrange insurance >> policies and to process claims. Your information is also used for business >> purposes such as fraud prevention and detection and financial management. >> This may involve sharing your information with third parties such as >> insurers, reinsurers, other brokers, claims handlers, loss adjusters, >> credit reference agencies, service providers, professional advisors, our >> regulators, police and government agencies or fraud prevention agencies. >> >> We may record telephone calls to help us monitor and improve the service >> we provide. For further information on how your information is used and >> your rights in relation to your information please see our privacy notice >> at https://www.ajginternational.com/Privacy-Policy/. If you are >> providing personal data of another individual to us, you must tell them you >> are providing their information to us and show them a copy of this notice. >> >> Where you are obtaining a non-consumer policy of (re)insurance, or cover >> for additional risks or renewal under an existing policy, you are required >> to make a fair presentation of the risk to a (re)insurer which discloses >> every material circumstance which you know or ought to know relating to the >> risk to be insured. A circumstance is material if it would influence the >> judgment of a prudent insurer in determining whether to provide insurance >> for the risk and, if so, on what terms. Disclosure must be reasonably clear >> and accessible to a prudent insurer and made in good faith. The >> aforementioned duty of disclosure is the applicable duty under the laws of >> England and Wales. If your policy is not subject to English law you are >> expected to disclose risk information in accordance with the requirements >> of the applicable law. In such circumstances we expect you will disclose >> risk information at least equal to the standard required under English law >> and where the applicable law requires you to disclose information over and >> above the level required under English law you will provide such >> information in accordance with that law. >> >> Where you are obtaining a consumer policy of insurance, you must read >> each question and answer honestly and fully and must take reasonable care >> to not make a misrepresentation. >> >> Failure to comply with the above disclosure requirements, as they apply >> to you, could mean that your policy of (re)insurance is void, its terms are >> materially altered or that (re)insurers are not liable to pay all or part >> of your claim(s). If you are in any doubt as to your obligations you should >> ask your usual contact. >> >> This e-mail and any attachments are CONFIDENTIAL and may contain legally >> privileged information. If you are not the intended recipient of this >> e-mail message, please telephone or e-mail us immediately, delete this >> message from your system and do not read, copy, distribute, disclose or >> otherwise use this e-mail message and any attachments. Although the above >> company has taken reasonable precautions to ensure this e-mail and any >> attachments are free of any virus or other defect that may affect your >> computer, it is the responsibility of the recipient to ensure that it is >> virus free and the above company does not accept any responsibility for any >> loss or damage arising in any way from its use.et >> >

3 2

RE: please provide the complete steps for creating new lacp ports..
by Alexander Griesser 08 Mar '19

08 Mar '19

Alright – with regards to Chris‘ question: I did assume that a0a currently is not LACP or connected to a different set of switches, which is probably the reason, why you cannot just add the physical ports in a0b to the existing ifgrp a0a, right? Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 From: Yuvaraja Shivaram <yuvaraja.kishan(a)gmail.com> Sent: Friday, March 8, 2019 11:48 AM To: Alexander Griesser <AGriesser(a)anexia-it.com> Subject: Re: please provide the complete steps for creating new lacp ports.. Thanks a lot Alexander for your update, since it is prod, i do not want to take any risk... will send you the complete step before monday(may be tommorrow), let me know if i am missing anything in that.. Regards Yuvaraja On Fri, Mar 8, 2019 at 4:08 PM Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: CDOT is non disruptive with most network operations, so you could either migrate all LIFs off from one physical node to the other one, reconfigure the interface group on node A then to be LACP with the new ports and move the LIFs back then, if what you’re trying to achieve is a seamless migration of your services to different physical ports with a different aggregation method. You can use the same VLAN on both physical interfaces, of course – no problem and it won’t affect the availability of the first tagged interface on a0a. Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 From: Yuvaraja Shivaram <yuvaraja.kishan(a)gmail.com<mailto:yuvaraja.kishan@gmail.com>> Sent: Friday, March 8, 2019 11:36 AM To: Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> Cc: toasters <toasters(a)teaparty.net<mailto:toasters@teaparty.net>> Subject: Re: please provide the complete steps for creating new lacp ports.. very good question...Alexander, earlier we were using only 2 ports, leaving other 2 ports keeping idle, so we are configuring other 2 ports and configuring LACP out of it,,,as of now do not have any plan to use any other vlan id's other than 608, ,which is already functional in the interface group as a0a, so now that same vlan id can be used for the new interface group a0b...? will that create any outage (since i am not getting vlan add..options similar to 7mode)... Regards Raj, On Fri, Mar 8, 2019 at 3:54 PM Alexander Griesser <AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com>> wrote: Hey, why do you want to have the same VLAN on two different interface groups? Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 From: toasters-bounces(a)teaparty.net<mailto:toasters-bounces@teaparty.net> <toasters-bounces(a)teaparty.net<mailto:toasters-bounces@teaparty.net>> On Behalf Of Yuvaraja Shivaram Sent: Friday, March 8, 2019 11:22 AM To: toasters <toasters(a)teaparty.net<mailto:toasters@teaparty.net>> Subject: please provide the complete steps for creating new lacp ports.. Hi All, Is there any way to add vlan to existing vlan-id, just how we do at 7mode... curretly we are using 9.4p1 cmode.... below vlan already exists....so now if i want to create a0b for the same vlan id 608, am not getting vlan add here, so.. if i use ,network port vlan create -node cluster-01 -vlan-name a0b-608... is there any outage to this id 608, which is already running in production...? Network Network Node VLAN Name Port VLAN ID MAC Address ------ --------- ------- -------- ----------------- cluster-01 a0a-608 a0a 608 xxxx cluster-02 a0a-608 a0a 608 xxxx

3 3

please provide the complete steps for creating new lacp ports..
by Yuvaraja Shivaram 08 Mar '19

08 Mar '19

Hi All, Is there any way to add vlan to existing vlan-id, just how we do at 7mode... curretly we are using 9.4p1 cmode.... below vlan already exists....so now if i want to create a0b for the same vlan id 608, am not getting vlan add here, so.. if i use ,network port vlan create -node cluster-01 -vlan-name a0b-608... is there any outage to this id 608, which is already running in production...? Network Network Node VLAN Name Port VLAN ID MAC Address ------ --------- ------- -------- ----------------- cluster-01 a0a-608 a0a 608 xxxx cluster-02 a0a-608 a0a 608 xxxx

4 5

Azure CVO and CPU
by SE 06 Mar '19

06 Mar '19

Hi, Is anyone here using Cloud Volumes ONTAP in Azure? I’m trying to figure out why it is the Azure dashboard claims our CVO instance is always running at 100% CPU, but if one ssh’s to the virtual appliance and does a sysstat -m on the node it shows all cpus at 0%-1%. Any ideas on the discrepancy between what Azure sees and what ONTAP claims? — Scott

3 3

vol move throughput throttle
by Mike Thompson 28 Feb '19

28 Feb '19

did a throttle to volume move throughput throttle ever make it into ontap 9? I see there was some discussion about this on the list a few years back, with the consensus that it was a known desire to have a throttle in there, and someday maybe it would make it in. I see there is a throttle on the number of concurrent moves, but don't see anything specific to throughput rate.

3 3

environmental control?
by Mark Flint 11 Feb '19

11 Feb '19

Hi list, does anyone know if there’s an official shutdown temp for a 3270 FAS in HA 7-mode? I can see the operating temperature list, and have wandered through the environment settings, and first impression is that it’s a function of inflow temp being too high, and possibly two other subsystem reporting too high, for environmental shutdown to occur, but that’s just guessing :) I’dreally like a link to a doc that says “w3270’s shutdown at 54 degrees celsius” or similar……. TIA, `Mark -- The Wellcome Sanger Institute is operated by Genome Research Limited, a charity registered in England with number 1021457 and a company registered in England with number 2742969, whose registered office is 215 Euston Road, London, NW1 2BE.

4 4

Re: Hide Snapshots from NFS clients
by Sebastian Goetze 04 Feb '19

04 Feb '19

Yep it is, I just discovered it... But *it's not mentioned in the Release Notes, *despite being something many people have asked for for a long time... I''ll fire up my 9.4 sim and will check Diag Mode. It's probably not in Advanced Mode, since it's not mentioned in the 9.4 Man Pages (and they DO contain Advanced Mode stuff...) Sebastian On 19/02/04 4:57 PM, Parisi, Justin wrote: > > It’s in 9.5: > > > > aff::*> version > > NetApp Release 9.5: Thu Dec 13 16:18:04 UTC 2018 > > > > aff::*> nfs modify -v3-hide-snapshot > > enabled disabled > > > > Not sure about 9.4. Did you go into diag/advanced mode? > > > > > > *From:* toasters-bounces(a)teaparty.net <toasters-bounces(a)teaparty.net> > *On Behalf Of *Sebastian Goetze > *Sent:* Monday, February 4, 2019 10:50 AM > *To:* Toasters <Toasters(a)teaparty.net>; Jeremy Webber > <Jeremy.Webber(a)al.com.au> > *Subject:* Hide Snapshots from NFS clients > > > > *NetApp Security WARNING*: This is an external email. Do not click > links or open attachments unless you recognize the sender and know the > content is safe. > > > > Hi All, > > > > I'm teaching a SMB/NFS combo at the moment, and the question again > came up, how to hide ".snapshot" from NFS users/scripts (like in the > 7-Mode days). > > > > In the Man Pages I found > > *[ -v3-hide-snapshot {enabled|disabled} ] - Hide Snapshot > Directory under NFSv3 Mount Point* > This optional parameter specifies whether to hide the .snapshot > directory while listing under NFSv3 mount > points. However an explicit access to the .snapshot directory will > still be allowed even though the option is > enabled. The default setting is disabled at the time of creation. > > (I checked, it's not in 9.4) > > > > Greetings from Munich > > > > Sebastian > > NAI (NetApp Instructor) > > > > _________________________________________________ > > Jeremy asked Feb 5, 2016: > > In 7-mode we are able to make snapshots accessible, but invisible > to NFSv3 clients. > > In this mode there is a .snapshot directory, but if you ‘ls’ that > directory it appears empty. However, if you ls .snapshot/hourly.0 > say then you can see that the snapshot is in fact there. > > We now have an 8.3.1 CDOT filer and have not been able to work out > how to reproduce the behaviour. The snapshots are either > accessible and visible (which causes problems for programs which > walk the tree) or not accessible at all.… >

1 1

Hide Snapshots from NFS clients
by Sebastian Goetze 04 Feb '19

04 Feb '19

Hi All, I'm teaching a SMB/NFS combo at the moment, and the question again came up, how to hide ".snapshot" from NFS users/scripts (like in the 7-Mode days). In the Man Pages I found *[ -v3-hide-snapshot {enabled|disabled} ] - Hide Snapshot Directory under NFSv3 Mount Point* This optional parameter specifies whether to hide the .snapshot directory while listing under NFSv3 mount points. However an explicit access to the .snapshot directory will still be allowed even though the option is enabled. The default setting is disabled at the time of creation. (I checked, it's not in 9.4) Greetings from Munich Sebastian NAI (NetApp Instructor) _________________________________________________ Jeremy asked Feb 5, 2016: In 7-mode we are able to make snapshots accessible, but invisible to NFSv3 clients. In this mode there is a .snapshot directory, but if you ‘ls’ that directory it appears empty. However, if you ls .snapshot/hourly.0 say then you can see that the snapshot is in fact there. We now have an 8.3.1 CDOT filer and have not been able to work out how to reproduce the behaviour. The snapshots are either accessible and visible (which causes problems for programs which walk the tree) or not accessible at all.…

2 1

Cyber Security Question
by Chris Hague 29 Jan '19

29 Jan '19

Hi All, The scenario is; An attacker has compromised security on your LAN and gained access to admin access on the NetApp filers. Subsequently they have wiped the primary and DR filers, including all SnapVault backups. How could this be protected against? KR, Chris. p.s. Apologies in advance for the insanely long signature! This email is being sent by a subsidiary of Arthur J. Gallagher Holdings (UK) Limited, part of the Arthur J. Gallagher & Co. global group of companies. For details of the registered office, company number and, where applicable, regulated status of our subsidiaries, please visit https://www.ajginternational.com/legal-regulatory-information/. We are the data controller of any personal information you provide to us or personal information that has been provided to us by a third party. We collect and process information about you in order to arrange insurance policies and to process claims. Your information is also used for business purposes such as fraud prevention and detection and financial management. This may involve sharing your information with third parties such as insurers, reinsurers, other brokers, claims handlers, loss adjusters, credit reference agencies, service providers, professional advisors, our regulators, police and government agencies or fraud prevention agencies. We may record telephone calls to help us monitor and improve the service we provide. For further information on how your information is used and your rights in relation to your information please see our privacy notice at https://www.ajginternational.com/Privacy-Policy/. If you are providing personal data of another individual to us, you must tell them you are providing their information to us and show them a copy of this notice. Where you are obtaining a non-consumer policy of (re)insurance, or cover for additional risks or renewal under an existing policy, you are required to make a fair presentation of the risk to a (re)insurer which discloses every material circumstance which you know or ought to know relating to the risk to be insured. A circumstance is material if it would influence the judgment of a prudent insurer in determining whether to provide insurance for the risk and, if so, on what terms. Disclosure must be reasonably clear and accessible to a prudent insurer and made in good faith. The aforementioned duty of disclosure is the applicable duty under the laws of England and Wales. If your policy is not subject to English law you are expected to disclose risk information in accordance with the requirements of the applicable law. In such circumstances we expect you will disclose risk information at least equal to the standard required under English law and where the applicable law requires you to disclose information over and above the level required under English law you will provide such information in accordance with that law. Where you are obtaining a consumer policy of insurance, you must read each question and answer honestly and fully and must take reasonable care to not make a misrepresentation. Failure to comply with the above disclosure requirements, as they apply to you, could mean that your policy of (re)insurance is void, its terms are materially altered or that (re)insurers are not liable to pay all or part of your claim(s). If you are in any doubt as to your obligations you should ask your usual contact. This e-mail and any attachments are CONFIDENTIAL and may contain legally privileged information. If you are not the intended recipient of this e-mail message, please telephone or e-mail us immediately, delete this message from your system and do not read, copy, distribute, disclose or otherwise use this e-mail message and any attachments. Although the above company has taken reasonable precautions to ensure this e-mail and any attachments are free of any virus or other defect that may affect your computer, it is the responsibility of the recipient to ensure that it is virus free and the above company does not accept any responsibility for any loss or damage arising in any way from its use.

5 6

small query about global exports
by Yuvaraja Shivaram 24 Jan '19

24 Jan '19

Hi All, cmode also behaves in the same way as 7 mode , when it comes to global export.. if already global export policy created (0.0.0.0./0) and later on if we create individual entry of host, does it gives outage, or is that fine since it access uses indexes, did not tested this since we do not have test environment. please let me know on this.. regards Yuvaraja

2 1

Setting permissions on NTFS CIFS share, users not found?
by Ian Ehrenwald 22 Jan '19

22 Jan '19

Hello I am unsure if this is an AD or a ONTAP config problem, but I thought I'd ask. I have not run into this before. Brand new cluster (9.4P4), brand new SVM, pretty minimal config. # Standard issue create CIFS server, allow anyone to connect through default export -policy # Create a volume to test with, NTFS security, and a CIFS share on top of it MyCluster::> vserver cifs create -vserver MySvm -cifs-server MyNas -domain MyAdDomain.Business.com (joined it to MyAdDomain.Business.Com) MyCluster::> vserver export-policy rule create -policyname default -clientmatch 0.0.0.0/0 -rorule any -rwrule any -superuser any -vserver MySvm -protocol cifs MyCluster::> volume create -volume cifs_test -aggregate MyCluster_02_SATA_1 -size 1g -junction-path /cifs_test -security-style ntfs -vserver MySvm MyCluster::> vserver cifs share create -share-name cifs_test -path /cifs_test -vserver MySvm # Test AD SID resolution from the filer, forwards and backwards MyCluster::> set diagnostic MyCluster::*> diag secd authentication translate -node MyCluster-02 -vserver MySvm -win-name MyUserName S-1-5-21-348434689-563360211-3986294115-29846 MyCluster::*> diag secd authentication translate -node MyCluster-02 -vserver MySvm -sid S-1-5-21-348434689-563360211-3986294115-29846 MyAdDomain\MyUserName (Windows User) MyCluster::*> diag secd authentication translate -node MyCluster-02 -vserver MySvm -win-name MyAdDomain\aGroupIamAmemberOf S-1-5-21-348434689-563360211-3986294115-1154 MyCluster::*> diag secd authentication translate -node MyCluster-02 -vserver MySvm -sid S-1-5-21-348434689-563360211-3986294115-1154 MyAdDomain\aGroupIamAmemberOf (Windows Domain group) So far so good. CIFS share permission by default is Everyone/Full. NTFS permission by default is Everyone/Full. I am able to connect to the share at \\MyNas\cifs_test and create a directory. The test directory has permission of Everyone/Full as viewed by right clicking on the test directory, selecting Properties, and viewing the Security tab. If I click on Advanced, I see the Owner correctly set to MyUserName as defined in AD. The Permissions tab in the Advanced window has Allow/Everyone/Full Control. Now, here is the problem. if I click on 'Add', the Permission Entry window pops up and I need to Select A Principal. When I Select A Principal and enter a known-good username into the 'Enter the object name to select' field and click Check Names, I get 'An object with the following name cannot be found.. blahblahblah'. I've tried with multiple users, multiple groups, all with the same result. I know these objects (users, groups) exist. The 'From this location' box in the window that pops up is referencing MyAdDomain.Business.Com, and the Object Type is User/Group/Built In SP. Is this a failure of something in our AD environment and our workstations, or is this a failure somewhere in ONTAP land? I'm leaning towards something screwed up in our AD environment because of the diag secd test from above working, but I'm not sure. Any ideas? Ian Ehrenwald Senior Infrastructure Engineer Hachette Book Group, Inc. 1.617.263.1948 / ian.ehrenwald(a)hbgusa.com This may contain confidential material. If you are not an intended recipient, please notify the sender, delete immediately, and understand that no disclosure or reliance on the information herein is permitted. Hachette Book Group may monitor email to and from our network.

2 2

Re: Bandwidth Calculator for Exiting NetApp
by jordan slingerland 14 Jan '19

14 Jan '19

Again, may be the best option that I can think of...but will it really be equal to your total write rate? What if a block changes 32 times in 5 seconds. I think semi sync is going to be at best every 3 seconds (i am actually asking and confirming that) and thus all 32 of those writes may end up only being 1 or 2 blocks traversing circuit sm is using. --Jordan On Mon, Jan 14, 2019 at 12:36 PM Fenn, Michael <fennm(a)deshawresearch.com> wrote: > One thing you could do is to look at the write rate over time via your > favorite tool (statistics show, OCUM, OCI, Harvest, etc.). Assuming the > goal is to have async SnapMirror “keep up”, all writes effectively need to > be journaled to the remote site. The bandwidth required would correspond > to the total write rate. > > > > Thanks, > > Michael > > > > *From: *<toasters-bounces(a)teaparty.net> on behalf of jordan slingerland < > jordan.slingerland(a)gmail.com> > *Date: *Monday, January 14, 2019 at 11:14 AM > *To: *Basil <basilberntsen(a)gmail.com> > *Cc: *"toasters(a)teaparty.net" <toasters(a)teaparty.net> > *Subject: *Re: Bandwidth Calculator for Exiting NetApp > > > > Best way I can think of ,though,potentially async sm may have a higher > change rate dependent on work load and current sm schedule. > > > > For example, a block might change once every 5 seconds but snapmirror once > every hr will only catch 1 block change every hour. > > > > > > > > > > On Mon, Jan 14, 2019 at 10:40 AM Basil <basilberntsen(a)gmail.com> wrote: > > I use an older version of ontap (9.1) with the old fashioned snapmirror > (DP, not XDP), but basically the estimate should be based on the cumulative > snapshot delta, minus potential compression. > > > > Snapshot show-delta is the command to see the delta between any two > snapshots. > > > > On Mon, Jan 14, 2019 at 9:27 AM Mike Michalakis <mike(a)directit.com.cy> > wrote: > > I’m wondering how anyone approaches the following scenario: > > > > We have an existing NetApp system in place (ONTAP 9.4), currently taking > Snapshots of all the required volumes as per the required RPO objectives as > defined. > > > > The question is: > > There is now a requirement to implement a DR site using Asynchronous > Snapmirror, based on the current snapshots and rate of change, what is an > estimated bandwidth requirement to meet X RPO. > > > > What tools or options are available for completing such an exercise or the > methodology > > > > Thanks > > MikeM > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > >

1 0

Bandwidth Calculator for Exiting NetApp
by Mike Michalakis 14 Jan '19

14 Jan '19

I’m wondering how anyone approaches the following scenario: We have an existing NetApp system in place (ONTAP 9.4), currently taking Snapshots of all the required volumes as per the required RPO objectives as defined. The question is: There is now a requirement to implement a DR site using Asynchronous Snapmirror, based on the current snapshots and rate of change, what is an estimated bandwidth requirement to meet X RPO. What tools or options are available for completing such an exercise or the methodology Thanks MikeM

4 3

would like to know the prons and cons between OCUM And Zenoss Monitoring tool
by Yuvaraja Shivaram 07 Jan '19

07 Jan '19

Hi All, Any one knows the pros and cons of OCUM and Zenoss monitoring tool.. just would like to know which is more beneficiaries either using OCUM or Zenoss tool for monitoring.. aiming to configure only netapp storage(C-Mode) not for heterogeneous storage's Please let us know if anyone's knows more about it, as I am new to Zenoss monitoring Tool. Regards Yuvaraja

5 4

DP to XDP conversion problems
by Peter D. Gray 04 Jan '19

04 Jan '19

Hi people, We are heavy users of snapmirror DR. We started to convert those relations to XDP from DP. We used: - break snapmirror - snapmirror release on source - snapmirror delete on target - wait (no idea what goes on behind the scenes here) - snapmirror create -destination-path <path> -type XDP -policy MirrorAllSnapshots -identity-preserve true - source-vserver <name> -source-cluster <name> - snapmirror resync -destination-path <path> This works a treat unless you have unprotected volumes. If there are source volumes flagged unprotected and therefore not on the destination vserver you appear to be doomed. We have found no way to ever resynmc the source to destination vservers. What you up wirth is something like: Cluster Source Destination State Status Policy Progress Size Lag SRC svm-esx: svm-esx-dr: Broken-off Idle MirrorAllSnapshots - 39GB - SRC svm-esx:esx_03 svm-esx-dr:esx_slinux_03 Broken-off Idle MirrorAllSnapshots - - - SRC svm-esx:esx_04 svm-esx-dr:esx_slinux_04 Broken-off Idle MirrorAllSnapshots - - - SRC svm-esx:esx_sscratch_00 svm-esx-dr:esx_sscratch_00 Uninitialized Idle MirrorAllSnapshots - - - SRC svm-esx:esx_sscratch_01 svm-esx-dr:esx_sscratch_01 Uninitialized Idle MirrorAllSnapshots - - - SRC svm-esx:esx_10 svm-esx-dr:esx_10 Broken-off Idle MirrorAllSnapshots - - - SRC svm-esx:esx_10 svm-esx-dr:esx_11 Broken-off Idle MirrorAllSnapshots - - - SRC svm-esx:esx_10 svm-esx-dr:esx_12 Broken-off Idle MirrorAllSnapshots - - - The above is hand edited so ignore any errors. You get the idea. No amount of stuffing around (and there has been a lot) has ever go this relationshp to work properly again. Anyine else seen this and/or have a solution. We have guessed that the unprotected flag is no longer supported which is annoying in itself. Regards, pdg Peter Gray Ph (direct): +61 2 4221 3770 Information Management & Technology Services Ph (switch): +61 2 4221 3555 University of Wollongong Fax: +61 2 4229 1958 Wollongong NSW 2522 Email: pdg(a)uow.edu.au Australia URL: http://pdg.uow.edu.au

3 2

Re: ONTAP 9.5RC1 and quota enforcement in flexgroups
by John Stoffel 22 Dec '18

22 Dec '18

And.... what was your error? Share the pain please? >>>>> "Mark" == Mark A via Toasters Allen <toasters(a)teaparty.net> writes: Mark> From: "Allen, Mark A" <maallen(a)lanl.gov> Mark> To: "toasters(a)teaparty.net" <toasters(a)teaparty.net> Mark> Date: Wed, 12 Dec 2018 23:01:39 +0000 Mark> Subject: Mark> Never mind! User error, user and tree quotas working as expected in flexgroup running 95RC1 Mark> Mark Mark> ----------------------------------- Mark> Toasters, Mark> I have a qtree for home directories in a FlexGroup. I’m testing 9.5RC1 quota enforcement and Mark> seeing mixed results. Mark> The tree type quota rule is enforced. Mark> But, the user type quota rules are not. Mark> Both default and userid specific user quotas are not enforced. The commands below are accepted Mark> without error and I see the disk limits in volume quota policy rule show and volume quota report. Mark> But, when I rsync a file over usage exceeds the limit. Any ideas? Mark> volume quota policy rule modify -vserver data -policy-name y_users -volume y_users_fg1 -type user Mark> -target "" -qtree users -disk-limit 3g Mark> volume quota resize… Mark> volume quota policy rule create -vserver data -policy-name y_users -volume y_users_fg1 -type user Mark> -target 12345 -qtree users -disk-limit 3g Mark> volume quota off/on… Mark> Mark Mark> _______________________________________________ Mark> Toasters mailing list Mark> Toasters(a)teaparty.net Mark> http://www.teaparty.net/mailman/listinfo/toasters

3 3

Creating a readonly user to monitor NetApp cluster via check_mk
by Sylvain Robitaille 20 Dec '18

20 Dec '18

Hello fellow toasters users ... We're in the process of deploying a pair of new CDOT filers and one of the things we'd like to setup with them is having check_mk (nagios and rrd, under the hood) monitor various attributes. We have a working instance at the moment using snmp to query the filers, but check_mk also provides a "plugin" that claims to work with the filer's web interface, so we'd like to examine that. To that end, I've setup a read-only user on the filer, that I intend will be able to access the web interface: security login create -vserver fc1-na -user-or-group-name nul_cmk \ -application http -authentication-method password -role readonly \ -comment "check_mk monitoring" The user shows up when I "show": fc1-na::> security login show -vserver fc1-na -user-or-group-name nul_cmk Vserver: fc1-na Second User/Group Authentication Acct Authentication Name Application Method Role Name Locked Method -------------- ----------- ------------- ---------------- ------ -------------- nul_cmk http password readonly no none The readonly role is unchanged from the OS default: fc1-na::> security login role show -vserver fc1-na -role readonly Role Command/ Access Vserver Name Directory Query Level ---------- ------------- --------- ----------------------------------- -------- fc1-na readonly DEFAULT readonly security none security login password all security login role show-user-capability all set all 5 entries were displayed. Trouble is that if I try to login to the web interface as that user, the browser stays "stuck" at the "Loading system details..." spinner widget. It's been there now for about two hours as I type this. Of course, check_mk's plugin logs a timeout while trying to access the interface. I fully suspect that I'm missing something, of course, but I'm afraid I haven't been able to find what that is. If someone out there has experience creating such a user for readonly access, a pointer to where I should be looking and/or documentation I should be reading would be hugely appreciated. (cli is preferred because it's easier to document what I've done that way, but if someone points me to resources in the web interface I'm sure I'll be able to find what I need at the cli.) -- ---------------------------------------------------------------------- Sylvain Robitaille syl(a)encs.concordia.ca Systems analyst / AITS Concordia University Faculty of Engineering and Computer Science Montreal, Quebec, Canada ----------------------------------------------------------------------

1 1

ONTAP 9.5RC1 and quota enforcement in flexgroups
by Allen, Mark A 12 Dec '18

12 Dec '18

Toasters, I have a qtree for home directories in a FlexGroup. I’m testing 9.5RC1 quota enforcement and seeing mixed results. The tree type quota rule is enforced. But, the user type quota rules are not. Both default and userid specific user quotas are not enforced. The commands below are accepted without error and I see the disk limits in volume quota policy rule show and volume quota report. But, when I rsync a file over usage exceeds the limit. Any ideas? volume quota policy rule modify -vserver data -policy-name y_users -volume y_users_fg1 -type user -target "" -qtree users -disk-limit 3g volume quota resize… volume quota policy rule create -vserver data -policy-name y_users -volume y_users_fg1 -type user -target 12345 -qtree users -disk-limit 3g volume quota off/on… Mark

1 1

what is the best practise to create LUNS in C-mode 9.4p2 version
by Yuvaraja Shivaram 11 Dec '18

11 Dec '18

Hi All, what is the best practice to create Luns in cmode (netapp)version 9.4p2.. by creating qtree and then on top of it creating luns (which will have options to change the security style..ntfs or unix) /vol/abc_vol/luns/dblog (by creating qtree "luns") OR vol/abc_vol/dblog (without creating qtree "luns").. just creating the luns without using qtree's in the path given.. Regards Yuvaraj

3 4

Local account from previous NetApp sometimes shows access on new NetApp
by Jeff Cleverley 10 Dec '18

10 Dec '18

Greetings, I'm seeing some odd behavior with user access on a share. I cannot reproduce the behavior on demand so I have not opened a case with NetApp. Environment - Older 7-mode filer name FAS with local user account named Foo. Newer CDOT filer named NEWFAS with local user account named Foo. We migrated data off FAS to NEWFAS, renamed FAS to OLDFAS, then renamed NEWFAS to FAS. The AD object FAS was removed and re-created for the original name. The same local accounts were set up on each filer. Problem - Because the local accounts on different filers have unique SIDs, the data copied came over with access permissions that usually show the SID for the Foo account (S-1-2-34-5...) I understand and am OK with this. What happens at a random time, and unknown reason is sometimes when using Windows Explorer to view properties, it occasionally shows OLDFAS\Foo instead of just the SID (S-1-2-34-5...) . I had a couple of people verify I wasn't crazy (my mother had me tested) and after checking properties on a couple of other files, it all went back to the SID. I'm at a loss to figure out how exploring to a share on FAS can occasionally figure out that the SID is for OLDFAS\Foo and correctly map a name when 99.9% of the time it only shows the SID. Thanks, Jeff -- ** Please note my email address has changed to jeff.cleverley(a)broadcom.com Jeff Cleverley Manufacturing Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

1 0

SnapCenter support for Oracle on OVM FCP environments
by Filip Sneppe 10 Dec '18

10 Dec '18

Hi, I am trying to figure out if it is possible and supported to back up and clone Oracle databases on Oracle Linux machines hosted on Oracle VM using FC LUNs. I read TR-3712 (Oracle VM and NetApp Best Practices Guide), TR-4700 (SnapCenter Plug-In for Oracle Databases), and TR-3633 (Oracle Databases on ONTAP), but none of these TRs talk about the combination of SnapCenter+OVM. I am not able to come up with an answer from the IMT either. Can someone, perhaps Jeffrey Steiner who is very active on this mailing list, shed some light on this? Thanks in advance! Filip

2 3

Deleting a AD domain from a cluster.
by Jeff Cleverley 27 Nov '18

27 Nov '18

Greetings, We have a 8.3.2P9 MetroCluster. We bought another company a couple of years ago and have had 2 domains associated with the cluster. The first domain is going to be shutoff in a couple of weeks. We were not too worried about it since we are active on the go-forward domain, and have usermaps with both domains. There is a trust relationship between the 2 domains. For any of you who have experience with a previous AD domain being decommissioned, I would appreciate any information about problems that occurred. We just moved some 7-mode data (old filers on new AD domain) to new SVMs on the cluster. All went well but a couple of quirks came up that we can't explain. We set up local user accounts just like the old ones. All worked fine. File system permissions/owners were good. We realized that we forgot to set up WINS servers. We set up the servers, and the local accounts now show up as SIDs instead of the username. We also had a process using the new AD domain that would not work. When they used the old AD domain\user, it worked. Once we put the WINS server addresses in, the old AD domain\user account failed. We had to switch back to the new AD domain\user account. This indicates our local user accounts and other things seem to be tied into our old AD domain. I opened a call with NetApp to try and get more data on what may break. Thanks, Jeff -- ** Please note my email address has changed to jeff.cleverley(a)broadcom.com Jeff Cleverley Manufacturing Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

1 0

FLI \ Flex Array Foreign lun error
by Chris Hague 11 Nov '18

11 Nov '18

Hi Toasters, When connecting 7 LUN's from a 3rd party array to an AFF700 initiator ports, randomly one or 2 of the LUN's go offline with the following error.. These LUN's (foreign disks) are all coming from the same 3rd party array and it doesn't happen to them all; Message: scsiblade.import.lun.offline: LUN 80G/X+MCr/LQ in volume with MSID 2155921120 on Vserver svm_fc has been brought offline due to an I/O failure on the underlying foreign disk with serial number 00000000000000000000000000000000000000000000000000000000000000000000000000000000 0000000000000000000000000000000000000000000000000. Description: This message occurs when a LUN currently being imported is brought offline by Data ONTAP (R) because of an I/O failure on the foreign disk. The issue is either that data cannot be read from or written to the source (foreign LUN), or that there is an internal error. Action: Verify the connectivity to the foreign disk. After resolving any connectivity issues, delete the LUN import and create it again. Running an; storage array config show Still listed 7 LUN's in the above case, but we have seen that drop to 5 \ 6 before, even though the LUNs are still presented and zoned. Un-presenting and re-presenting does seem to kick start them back into life, but is not ideal. This seems to happen on different vendor 3rd Party arrays (we have seen it happen both on HUS and HP presented LUNs) Can anyone offer any advice on this? Many Thanks in advance, Chris. #Apologies for the stupidly long disclaimer! This email is being sent by a subsidiary of Arthur J. Gallagher Holdings (UK) Limited, part of the Arthur J. Gallagher & Co. global group of companies. For details of the registered office, company number and, where applicable, regulated status of our subsidiaries, please visit https://www.ajginternational.com/legal-regulatory-information/. We are the data controller of any personal information you provide to us or personal information that has been provided to us by a third party. We collect and process information about you in order to arrange insurance policies and to process claims. Your information is also used for business purposes such as fraud prevention and detection and financial management. This may involve sharing your information with third parties such as insurers, reinsurers, other brokers, claims handlers, loss adjusters, credit reference agencies, service providers, professional advisors, our regulators, police and government agencies or fraud prevention agencies. We may record telephone calls to help us monitor and improve the service we provide. For further information on how your information is used and your rights in relation to your information please see our privacy notice at https://www.ajginternational.com/Privacy-Policy/. If you are providing personal data of another individual to us, you must tell them you are providing their information to us and show them a copy of this notice. Where you are obtaining a non-consumer policy of (re)insurance, or cover for additional risks or renewal under an existing policy, you are required to make a fair presentation of the risk to a (re)insurer which discloses every material circumstance which you know or ought to know relating to the risk to be insured. A circumstance is material if it would influence the judgment of a prudent insurer in determining whether to provide insurance for the risk and, if so, on what terms. Disclosure must be reasonably clear and accessible to a prudent insurer and made in good faith. The aforementioned duty of disclosure is the applicable duty under the laws of England and Wales. If your policy is not subject to English law you are expected to disclose risk information in accordance with the requirements of the applicable law. In such circumstances we expect you will disclose risk information at least equal to the standard required under English law and where the applicable law requires you to disclose information over and above the level required under English law you will provide such information in accordance with that law. Where you are obtaining a consumer policy of insurance, you must read each question and answer honestly and fully and must take reasonable care to not make a misrepresentation. Failure to comply with the above disclosure requirements, as they apply to you, could mean that your policy of (re)insurance is void, its terms are materially altered or that (re)insurers are not liable to pay all or part of your claim(s). If you are in any doubt as to your obligations you should ask your usual contact. This e-mail and any attachments are CONFIDENTIAL and may contain legally privileged information. If you are not the intended recipient of this e-mail message, please telephone or e-mail us immediately, delete this message from your system and do not read, copy, distribute, disclose or otherwise use this e-mail message and any attachments. Although the above company has taken reasonable precautions to ensure this e-mail and any attachments are free of any virus or other defect that may affect your computer, it is the responsibility of the recipient to ensure that it is virus free and the above company does not accept any responsibility for any loss or damage arising in any way from its use.

1 0

Creating qtrees in flexgroups
by Allen, Mark A 10 Nov '18

10 Nov '18

Hello, Looking to have a flexgroup, fg1, which contains 2 subdirectories, bike and car, and create qtrees under each… Something like, /fg1/bike and /fg1/car. Then create the qtrees, /fg1/bike/qtree11 and /fg1/car/qtree22. This would enable a single flexgroup to be mounted on different clients (for example, mount -t nfs -o vers=3 IP:/fg1/bike /mnt/bikes) based on vehicle type. The alternative is to just use 2 flexgroups. Thanks! Mark

1 0

Volume re-home options
by Jeff Cleverley 07 Nov '18

07 Nov '18

Greetings, We are migrating off a 7-mode cluster to a cdot metrocluster. We have a number of requirements to keep the 7-mode names. Each 7-mode controller has ~90TB of used data and an average of 30 volumes with CIFS and/or NFS exports. We had planned on using a mix of xcp/robocopy to migrate to an existing SVM, rename the old cluster, create new cdot SVMs, then re-home the volumes to the new SVM. We tested this on a new cluster and it worked fine. The new cluster was not MC and the re-home won't work with MC. Is there a way to get the MC to assign the IP of the old 7-mode name to one of the SVMs something like an alias? Thanks, Jeff -- ** Please note my email address has changed to jeff.cleverley(a)broadcom.com Jeff Cleverley Manufacturing Engineer 4380 Ziegler Road Building 1, Dock 1 Fort Collins, Colorado 80525 970-288-4611

1 1

← Newer
1
...
8
9
10
11
12
13
14
...
542
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters