toasters

toasters@lists.teaparty.net

13531 discussions

cDOT 8.2.1P3: removing PSU from a disk shelf went unnoticed for OCUM / Autosupport
by Momonth 06 May '15

06 May '15

Hi, So I've been testing cDOT monitoring for a while now. I'm using OCUM as my primary source of alerts, but also deploying NetApp SDK based checks in nagios. Here is what I noticed on (almost) "live" 6 nodes cDOT cluster, autosupport / OCUM configured and tested: 1. Take a cDOT node in Multi-Path HA / ACP Full Connectivity config (I'd guess this is what most people run). 2. Take a random disk shelf configured on the node in the cluster, it was DS2246 SAS 10K RPM 1.2TB disks in my case. 3. Remove one PSU on the disk shelf. The results: 1. It does not generate Autosupport message about the PSU missing. 2. OCUM doesn't trigger an alert. The only sub-system that noticed the issue is 'event': Time Node Severity Event ------------------- ---------------- ------------- --------------------------- 4/30/2015 12:11:01 na101node-1a WARNING ses.status.psWarning: DS2246 (S/N SHFHU1427000502) shelf 20 on channel 0b power warning for Power supply 1: not installed. This module is on the rear of the shelf at the bottom left. But it didn't go any further. Has anyone else seen this behavior? I wonder if I'm missing some settings etc .. Cheers, Vladimir

4 6

NetApp and VMware Access Path Down (Dead)
by Mike Michalakis 30 Apr '15

30 Apr '15

Has any experienced to following especially with a VMware environment. The storage system is tugging along happily and then you get High request for resources, resulting in CPU and Disk going about 90%. This isn't my question. My question is; within the VMware environment you get High Latency, then "Dead Path" and in the vmkernel.log high "WORLD" counters, this is normally resolved via a reboot of the VMhost, after the APD the NetApp resources go backdown to 0% until the next peak. Is the above considered normal, with high utilization systems, if not what should the behaviour be? OnTap is 8.2.1P2 7-Mode.

2 1

Multiple snapvault snapshots and schedules.
by Jeff Cleverley 29 Apr '15

29 Apr '15

Greetings, I've got a situation where a backup relationship does a nightly backup and a weekly backup. Both go to the same destination. The snapshots are named with the _nightly and _weekly tags. This is file system data and not luns. The problem is not fractional reserve :-) I'm assuming the snapshots are still based on one another and each doesn't have it's own baseline. Is this correct? The problem is someone at a remote site appears to have done a drag and drop which generated ~2 TB of "new" data. The remote site has a very limited WAN. The completion of the current backup session will run for ~2 month before it completes. If I have to do a new baseline, it will also take about that long. Since the snapshots got out of hand, it caused the file system to grow beyond the designated size the volume guarantee has been disabled, and it actually filled up the containing aggregate. I'm hoping to be able to delete one of the SV snapvaults to free space and get things in line space wise. Unfortunately I'm expecting I'll still have to let a 2 month backup run one way or another. If I'll end up with a new baseline anyway, I may as well nuke everything now and start it. At least I'll be able to delete some snapshots and free space. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

7 13

Berk Comm...
by Jeffrey Mohler 28 Apr '15

28 Apr '15

Is there a primary contact for BerkComm on toasters? If there is..Email me separately please. :) _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta

1 0

cDOT cluster kernel-service
by Weber, Mark A 28 Apr '15

28 Apr '15

Anyone have a 4-node 2240 cluster running 8.2.x? If so, could you tell me if failover says enabled or disabled when you do a "cluster kernel-service show" in diag mode. I've had a performance case open for months on this cluster and I noticed recently that this cluster says failover is disabled but our 4 node 3220 cluster says enabled. LCNA2::> set d Warning: These diagnostic commands are for use by NetApp personnel only. Do you want to continue? {y|n}: y LCNA2::*> cluster kernel-service show Node State Ver Failover Dump FSM-State ---------- -------- ---- --------- --------- --------- LCNA2-01 enabled 1 disabled enabled CLAM_CORE_ST_NONMASTER_WAITING_FOR_BACKOFF_TIMEOUT LCNA2-02 enabled 1 disabled enabled CLAM_CORE_ST_NONMASTER_WAITING_FOR_BACKOFF_TIMEOUT LCNA2-03 enabled 1 disabled enabled CLAM_CORE_ST_MASTER_WAITING_FOR_HB_TIMEOUT LCNA2-04 enabled 1 disabled enabled CLAM_CORE_ST_NONMASTER_WAITING_FOR_BACKOFF_TIMEOUT 4 entries were displayed. Thanks mark

3 6

Re: Adding DS2246 to FAS2240-2 with existing DS4243
by Francis Kim 28 Apr '15

28 Apr '15

Just be sure to document your cabling carefully, so someone how comes after you down the road, including yourself, to add another shelf will know that your latest DS2246 in your stack is really next-to-the-last in cabling terms. Don’t expect cabling to look pretty after you insert your shelf into the middle of the stack. I’ve recently had ACP housekeeping complain about missing IOMs, even though cabling was all correct after the shelf addition. If disabling and reenabling ACP and cable pull/inserts don’t clear it, you might have to actually pull the IOM and reseat it. All non-disruptive operations as long as you start out from Multipath HA state. Francis Kim | Engineer 510-644-1599 x334 | fkim(a)berkcom.com<mailto:fkim@berkcom.com> BerkCom | www.berkcom.com<http://www.berkcom.com/> NetApp | Cisco | Supermicro | Brocade | VMware On Apr 27, 2015, at 2:09 PM, Aaron Lewis <aaron(a)ivoxy.com<mailto:aaron@ivoxy.com>> wrote: Thanks, Francis. I’ve done a lot of shelf adds, but never inserted into an existing stack. So, I was looking for confirmation from the group. I knew the DL was the quickest way to get an answer that I could trust. Cheers, Aaron From: Francis Kim Date: Monday, April 27, 2015 at 2:04 PM To: Aaron Lewis Cc: "toasters(a)teaparty.net<mailto:toasters@teaparty.net>" Subject: Re: Adding DS2246 to FAS2240-2 with existing DS4243 Yes, you can absolutely hot-add the new DS2246 into your disk stack to get to the configuration you want. The only thing to be careful is to maintain at least a single path at all times. If you want details, I can send you the decabling and recabling sequence for your stack. Francis Kim | Engineer 510-644-1599 x334 | fkim(a)berkcom.com<mailto:fkim@berkcom.com> BerkCom | www.berkcom.com<http://www.berkcom.com/> NetApp | Cisco | Supermicro | Brocade | VMware On Apr 27, 2015, at 1:45 PM, Aaron Lewis <aaron(a)ivoxy.com<mailto:aaron@ivoxy.com>> wrote: Hi all, I have a FAS2240-2 with the following configuration: Existing Stack: 1. DS2246 disk shelf (internal) 2. DS2246 disk shelf (external) 3. DS4243 disk shelf I need to add a new DS2246 to this system and want to maintain the single transition between 6G and 3G so it looks like this: Existing Stack: 1. DS2246 disk shelf (internal) 2. DS2246 disk shelf (external) 3. NEW DS2246 4. DS4243 disk shelf Is it possible to hot-add the DS2246 into the existing stack? The Installation Guide gives the process for adding it to the bottom of the stack, but doesn't explicitly prohibit inserting the shelf and it seems like you could with Multipath HA. Thanks, Aaron _______________________________________________ Toasters mailing list Toasters(a)teaparty.net<mailto:Toasters@teaparty.net> http://www.teaparty.net/mailman/listinfo/toasters

4 3

Adding DS2246 to FAS2240-2 with existing DS4243
by Aaron Lewis 27 Apr '15

27 Apr '15

Hi all, I have a FAS2240-2 with the following configuration: Existing Stack: 1. DS2246 disk shelf (internal) 2. DS2246 disk shelf (external) 3. DS4243 disk shelf I need to add a new DS2246 to this system and want to maintain the single transition between 6G and 3G so it looks like this: Existing Stack: 1. DS2246 disk shelf (internal) 2. DS2246 disk shelf (external) 3. NEW DS2246 4. DS4243 disk shelf Is it possible to hot-add the DS2246 into the existing stack? The Installation Guide gives the process for adding it to the bottom of the stack, but doesn't explicitly prohibit inserting the shelf and it seems like you could with Multipath HA. Thanks, Aaron

3 3

cDOT provisioning strategy
by Momonth 24 Apr '15

24 Apr '15

Hi, We are (finally) getting close to go live with cDOT clusters. I know some of you guys are already "happy customers" and I would like to hear your thoughts on the following: 1. SAN: Create one SVM per physical node? Or multiple SVMs per node and then combine LUNs, that belong to a certain application, on a single SVM? 2. NAS: pretty much the same questions, pros and cons of having multiple SVMs. What are your criteria when you decide to spin up a new SVM? SVM conception seems to give quite some flexibility, but I can't get my head around as to when / how to apply this flexibility. I've never used vfilers in 7-Mode world. Cheers, Vladimir

5 4

Extra Protection for Certain Datasets
by Ray Van Dolson 23 Apr '15

23 Apr '15

Hi everyone; Thinking about how to protect certain datasets (NAS shares) with additional authentication requirements -- probably two-factor authentication. Am thinking this could be achieved via a "second" Active Directory domain which requires the two factor auth (tokens, etc.) and then a vFiler which attaches to this domain and houses the data. I'm fairly certain there's no clever way to stick with a single domain and configure only certain datasets to require additional auth? Thinking CIFS, but presumably kerberized NFSv4 could also work here. Ray

2 1

what in the world happend to performance (dfm) advisor with CDOT
by Iluhes 23 Apr '15

23 Apr '15

What happened? Where are all the performance graphs, they are all gone.Did the tool get killed? The performance manager is almost empty

5 11

Encryption Questions
by Ray Van Dolson 17 Apr '15

17 Apr '15

Hi all -- for those of you doing encryption (on NetApp or another platform): What are you using for Key Management? SafeNet? IBM's KMS? Something else? Do you find yourselves purchasing self-encrypting drives *only* for datasets you're sure need it vs. creating a catch-all location where mixed data lives but at lesat you can say that it's "all encrypted at rest"? The approach here can obviously impact costs... Thanks, Ray

3 4

Excessive Flow Control Frames?
by Philbert Rupkins 17 Apr '15

17 Apr '15

Toasters, We have ethernet flow control set to full on our NetApp's 10g interfaces. The FEX ports to which our 10g interfaces are connected also have flow control TX/RX enabled. I realize enabling flow control is against best practices. I am trying to determine if we are seeing an excessive number of flow control frames. We received over 12,000 PAUSE frames from the FEX within a 10 minute period which sounds excessive to me. Can anybody confirm that 12,000 is an excessive number of PAUSE frames that would likely result in connectivity issues? Here are statistics for one of our 10g interfaces during a recent 10 minute interval. Notice that the NetApp is receiving PAUSE frames (RECEIVE-Xoff) from the FEX and never transmitting (TRANSMIT-Xoff). RECEIVE Jabber: 0 | Bus overruns: 0 | Xon: 12412 Xoff: 12412 | Jumbo: 0 TRANSMIT Queue overflows: 0 | No buffers: 0 | Xon: 0 Xoff: 0 | Jumbo: 0 | TSO non-TCP drop: 0 What I see is the FEX telling the NetApp to slow down. I just dont know if the FEX is slowing down the NetApp enough that it would cause problems. Have a great day, Phil

7 8

Firing up an old F760...
by Jeffrey Mohler 15 Apr '15

15 Apr '15

This could be fun...and old F760 with say, 4 shelves of 36G drives.. Replace the NVRAM battery, check power supplies for leaking capacitor oil...reseat cards and DIMMS... What're the odds it'll work, and any other fire-prevention steps to take? :) -Cheers _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta

12 18

Odd Kahuna behaviour W/Pam
by Jeffrey Mohler 15 Apr '15

15 Apr '15

I have an HA pair, both with pam. One does NOT have PAM enabled. We have some uniquely bursty workloads at the top of every hour, and they are unusually high peaks 3 or 4 hours every day in the AM. The PAM enabled system suffers VERY High concurrency & latency on these few peaks, but the non PAM system does not. PAM hit rate is about 60%. I'm wondering if this is because these sudden user-based spike workloads are almost 0% cachable, that Kahuna takes a hit evicting an unusually high amount of blocks from PAM..and updating the in-ram hash of what's actually in PAM. When I enable PAM on controller 2, this odd concurrency/latency spike then also shows up on that head too. Thoughts? _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta

3 2

Re: Firing up an old F760...
by Jeffrey Mohler 15 Apr '15

15 Apr '15

700s done have one of those. 600's do. Ever do an NVRAM swap on one? It's surgery. :) _________________________________Jeff MohlerTech Yahoo, Storage Architect, Principal(831)454-6712TW: @PrincipalYahooYM: Supra89ta On Wednesday, April 15, 2015 10:31 AM, "Hughes, Patrick" <Patrick.Hughes(a)netapp.com> wrote: Don't forget to check the flux capacitor. ;-) Sent from my iPhone using two clumsy thumbs and sometimes my nose On Apr 15, 2015, at 11:24 AM, Steiner, Jeffrey <Jeffrey.Steiner(a)netapp.com> wrote: #yiv7465649218 #yiv7465649218 -- _filtered #yiv7465649218 {panose-1:2 4 5 3 5 4 6 3 2 4;} _filtered #yiv7465649218 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;} _filtered #yiv7465649218 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;} _filtered #yiv7465649218 {}#yiv7465649218 #yiv7465649218 p.yiv7465649218MsoNormal, #yiv7465649218 li.yiv7465649218MsoNormal, #yiv7465649218 div.yiv7465649218MsoNormal {margin:0in;margin-bottom:.0001pt;font-size:12.0pt;}#yiv7465649218 a:link, #yiv7465649218 span.yiv7465649218MsoHyperlink {color:blue;text-decoration:underline;}#yiv7465649218 a:visited, #yiv7465649218 span.yiv7465649218MsoHyperlinkFollowed {color:purple;text-decoration:underline;}#yiv7465649218 span.yiv7465649218EmailStyle17 {color:#1F497D;}#yiv7465649218 .yiv7465649218MsoChpDefault {font-size:10.0pt;} _filtered #yiv7465649218 {margin:1.0in 1.0in 1.0in 1.0in;}#yiv7465649218 div.yiv7465649218WordSection1 {}#yiv7465649218 I was once at a customer doing an upgrade on a massively parallel database environment. It was about 5 racks of little 1U servers with FCP connectivity. The timeouts for FCP were set to 0, meaning if you lose one single SCSI command, just reboot. That was legit for local disk, but not SAN. Ever seen 200 servers reboot in perfect synchronization? I have. I was in the hot aisle, sandwiched between the servers and the storage system. As soon as the controller rebooted, it got very, very bright as all the LED’s on the backs of the servers lit up during self-test. Then it got very hot and loud as all the self-test progressed and all the fans spun up to maximum speed. From:toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net]On Behalf Of Jeffrey Mohler Sent: Wednesday, April 15, 2015 7:03 PM To: Steve Rikli Cc: toasters(a)teaparty.net Subject: Re: Firing up an old F760... Ive seen that, but at scale. Was in PS at Netapp, and I was asked to sit-in on a customer moving racks of 500s, 600s, and a few 700s from telco racks to cabinets. At the time the cabinets were 240v only. I was in another room...sit-in help as needed, I was not allowed in the DC. They made a show of 'lets hit the breakers and turn on all 11 cabinets at once'. Most of them were full of shelves with 120v only power supplies, at the time I think that was "green button" supplies. Lots of oil..lots of fire. Replaced 100+ supplies with switching ones, and all was good in the end. Them was the dayz.. _________________________________ Jeff Mohler Tech Yahoo, Storage Architect, Principal (831)454-6712 TW: @PrincipalYahoo YM: Supra89ta On Wednesday, April 15, 2015 9:51 AM, Steve Rikli <sr(a)genyosha.net> wrote: Don't stand directly behind it when you turn it on. :-) Semi-seriously though, I once had a very old original DS14 shelf p/s (the ones with the vertial bar handles) flame out at me. We'd just finished re-racking the rig, so I flipped on the breakers and moved down the row to start on the next one, when the p/s spat out a small and brief burst of smoke and spark. It wouldn't have been harmful and probably wouldn't have even left a mark, but it was still a surprise. On Wed, Apr 15, 2015 at 04:39:04PM +0000, Jeffrey Mohler wrote: > This could be fun...and old F760 with say, 4 shelves of 36G drives.. > > Replace the NVRAM battery, check power supplies for leaking capacitor oil...reseat cards and DIMMS... > > What're the odds it'll work, and any other fire-prevention steps to take??????? :) _______________________________________________ Toasters mailing list Toasters(a)teaparty.net http://www.teaparty.net/mailman/listinfo/toasters

1 0

Re: FAS8040 network configuration in CDOT
by tmac 15 Apr '15

15 Apr '15

Yeah, keep looking back at the FAS8020 for some reason...only has the four ports. Make sure you have the X6599A (the 10-GIG SFP) and not the X6596(FC SFP). For each controller: a0a should consist of e0e/e0g which should go to the same switch, if possible, different blades on the same switch and e0f/e0h which should go to the same switch, if possible, different blades on the same switch --> if you cannot split across blades, at least split across ASICs on the same blade. --tmac *Tim McCarthy* *Principal Consultant* On Thu, Apr 9, 2015 at 8:24 AM, Clark, André M. <Andre.Clark(a)redeight.com> wrote: > Each 8040/60/80 controller has 4 10GbE ports (e0a-e0d) and 4 UTA2 ports > (e0e-e0h). Ports e0a-e0d, in a cDOT configuration, are used for the > private cluster network while ports e0e-e0h are used for data > communications. No extra 10G card is needed at this time. > > > > Regards, > > > > André M. Clark <Andre.Clark(a)redeight.com> | Sr. Consulting Architect | > 917.388.8236 > > *Tell me I will forget... Show me I may remember... Involve me I WILL > UNDERSTAND!!! Start by doing what's necessary, then what's possible, and > suddenly you are doing the impossible!!!* > > *Red8*, An Insight Investments Company > > www.redeight.com > > > > *From:* toasters-bounces(a)teaparty.net [mailto: > toasters-bounces(a)teaparty.net] *On Behalf Of *tmac > *Sent:* Thursday, 9 April, 2015 06:22 > *To:* Francis Kim > *Cc:* toasters(a)teaparty.net > *Subject:* Re: FAS8040 network configuration in CDOT > > > > No that won't work. > > If you are configuring cDOT, at least two ports per controller are > reserved for the cluster network (e0a & e0c) > > This leaves e0b and e0d available for normal network access > > > > The recommended configuration is to use all four ports for the cluster > network (e0a, e0b, e0c & e0d). > > In this case, if you need/want 10gig network connections you would need an > extra 10gig card > > > > AS indicated earlier in this thread, from each controller: > > a0a should be a multimode_lacp VIF and contain: > > e0b -> switch 1 > > e0d -> switch 2 > > > > Then you can create your VLANs: a0a-123, a0a-456 > > > > Place your LIFs on the tagged VLANs > > > > Create a failover group for node-01:a0a-123 and node-02:a0a-123 > > Create a failover group for node-01:a0a-456 and node-02:a0a-456 > > > > Assign the failover group to the appropriate LIF > > > > PS: DO NOT FORGET to disable spanning tree on the switch ports. > > --> spanning tree protocol should only be enabled on ports connected to > other switches. > > --> it is not needed on ports connected to en hosts > > --> in a cluster failover event it could take an extra 45 seconds for a > port to become available.(not good) > > --> remember to use the right version of the command. if it is a trunk, > you usually need that on the line > > > > --tmac > > > > *Tim McCarthy* > > *Principal Consultant* > > > > > > > > On Wed, Apr 8, 2015 at 11:36 PM, Francis Kim <fkim(a)berkcom.com> wrote: > > You can also tie the four links into a single interface group and carve > it up into multiple VLANs. > > > > What ports are you going to use for the cluster interconnect? I assume > you're ordering a switchless cluster of two nodes? > > > > > > *Francis Kim *| Engineer > > 510-644-1599 x334 | fkim(a)berkcom.com > > > > *BerkCom* | www.berkcom.com > > NetApp | Cisco | Supermicro | Brocade | VMware > > > > On Apr 8, 2015, at 3:51 PM, Sayla, Mustafa <MSAYLA(a)mesirowfinancial.com> > wrote: > > > > We are looking to buy new FAS8040 and configure it with CDOT. I am looking > for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per > controller and I want to use all four ports to create an interface group > with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch > and 2 ports to go to other VSS switch so I have switch redundancy also. I > am not sure if it is doable since I am going to two different switches. Any > recommendation is appreciated. > > > > Mustafa > > *Visit us on the Web at mesirowfinancial.com > <http://mesirowfinancial.com/>* > > *This communication may contain privileged and/or confidential > information. It is intended solely for the use of the addressee. If you are > not the intended recipient, you are strictly prohibited from disclosing, > copying, distributing or using any of this information. If you received > this communication in error, please contact the sender immediately and > destroy the material in its entirety, whether electronic or hard copy. > Confidential, proprietary or time-sensitive communications should not be > transmitted via the Internet, as there can be no assurance of actual or > timely delivery, receipt and/or confidentiality. This is not an offer, or > solicitation of any offer to buy or sell any security, investment or other > product.*_______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > > > > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > http://www.teaparty.net/mailman/listinfo/toasters > > >

8 16

DFM LDAP auth/Linux
by Edward Rolison 14 Apr '15

14 Apr '15

I've been setting up a new instance of DFM on Linux, and have started configuring up DFM. I've finally figured out why it's not been working though - it's because the 'CN' for all our accounts contains a bracket. CN=Full Name (unixID) This leaves me in a bit of an irritating position. I can't change my account config across my active directory - at least not very easily. Can I do 'LDAP auth' via the local system somehow? I can log in to my DFM box as me, and when I add my user... it recognises the account. But it doesn't seem to allow a password auth (not unless I set a local account, which is a route that'll mean having to wrangle with security). Anyone else run into this problem or got a line of investigation? (I have a ticket open, but this feels like the sort of thing that's irritatingly difficult to 'fix' on the fly).

3 4

gfigueroa@berkcom.com
by Guadalupe Figueroa 10 Apr '15

10 Apr '15

gfigueroa(a)berkcom.com

1 0

FAS8040 network configuration in CDOT
by Sayla, Mustafa 09 Apr '15

09 Apr '15

We are looking to buy new FAS8040 and configure it with CDOT. I am looking for network recommendation with Cisco 6509 VSS. 8040 has four 10G ports per controller and I want to use all four ports to create an interface group with two VLAN, using VLAN tagging. I want 2 ports to go to one VSS switch and 2 ports to go to other VSS switch so I have switch redundancy also. I am not sure if it is doable since I am going to two different switches. Any recommendation is appreciated. Mustafa Visit us on the Web at mesirowfinancial.com This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Confidential, proprietary or time-sensitive communications should not be transmitted via the Internet, as there can be no assurance of actual or timely delivery, receipt and/or confidentiality. This is not an offer, or solicitation of any offer to buy or sell any security, investment or other product.

5 4

Snapvault with system shutdown and rename
by Jeff Cleverley 08 Apr '15

08 Apr '15

Greetings, We're going to be splitting data from a 7-mode cluster (7.3.7). Some data is being SM to an 8.0.2 7-mode cluster with a new name. The remaining data and the original cluster will be moved to a new location and offline for a couple of days. My questions revolve around the snapvault snapshots and relationships. A couple of years ago we replaced the cluster heads and the backup relationships broke because schedule created a new snapshot which did not match the one the secondary was looking for. We had to re-baseline a lot of data. 1. Do I need to disable the SV schedules on both primary and secondary volumes for the cluster that will be offline for a couple of days, or will it be fine and pick up where it left off when it comes back up? 2. I know I'll need to modify the existing SV relationship with the data migrating to the new cluster. Since there are no SV schedules in place on the new cluster, there shouldn't be any issues with a new SV snapshot being created before I do a snapvault start -S with the new relationship to update it. It's 1am so I'm sure I may be missing something and wanted to check. Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

2 1

DFM misbehaving - 'going sluggish' about 10m after restart
by Edward Rolison 02 Apr '15

02 Apr '15

We've a DFM (an older version) that's misbehaving. At startup we get 'Service did not reach 'started' state due to timeout'. It does actually start and we can use the web interface... but after a few minutes (10ish) it starts to get very sluggish. restarting clears it up, but only (very) temporarily. I've turned off PerfAdvisor, because I spotted some substantially large logs. Is anyone able to offer me suggestions of where else to look to troubleshoot? It looks like dbsrv10.exe is consuming all of a processor, trying to do 'something' but I have no idea what that might be. Perhaps a post restart 'tidy up'? I suspect this might be an 'open a case' situation, but I thought I'd seek some wisdom here too. Thanks, Ed.

4 4

Snapmirror relationships
by Jeff Cleverley 02 Apr '15

02 Apr '15

Greetings, We have to split a cluster and one shelf will go to one site, and the rest go to another site. The single shelf (DS4243, 2 TB SATA) comprising 2 aggregates and 11 volumes will get moved to a different NetApp. The shelf will end up on a system with new names and no aliases can be used. There are some variable moving parts so I need a sanity check. FilerA 7.3.7 - owner of the one shelf FilerB 8.1.2P4 - soon to be owner of the one shelf I've setup a snapmirror with a daily cron update that goes from FilerA to FilerB. This seems OK. If we can get the shelf owners to split the same day the other moves, I'm just going to move the shelf, change ownership, import the aggregate/volumes, create cifs shares, and update the snapvault relationship. If they insist on moving before that, I have to break the mirrors after a final sync, rename the current snapmirror destination volumes, update snapvault relationships and create cifs shares. This seems OK. Now the questions :-) 1. Are there any issues associated with this process with the OS differences or snapmirror not keeping filesystem security type, share, permissions, etc? 2. If I have to split the shelf later, I want to add it to FilerB and make that shelf the production shelf. This is a short term solution and the heads and shelves are not supported. Is there a graceful way to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. 3. Any other glaring issues that stand out? Thanks, Jeff -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

6 7

cDOT security best practise reference?
by Martin 01 Apr '15

01 Apr '15

Hi, I've recently written a Netapp security policy for 7-mode Ontap. I used the TRs for reference: Data ONTAP Security Guidance - TR-3950 (November 2011) PCI-DSS Version 2.0 and Data ONTAP 8.1 TR-3996 (August 2012) Both of these are fairly old and not specific to cDOT. I've seen TR-4191 but that is specific to Windows File services: TR-4191 - Best Practices Guide for Clustered Data ONTAP 8.2.x Windows File Services Does anyone know of any best practise documents for cDOT whether Netapp or otherwise? Thanks Martin -- View this message in context: http://network-appliance-toasters.10978.n7.nabble.com/cDOT-security-best-pr… Sent from the Network Appliance - Toasters mailing list archive at Nabble.com.

9 13

snapdirve and cluster OS...how to connect to storage system
by Iluhes 31 Mar '15

31 Mar '15

I have FC SVM and trying to setup a snapdrive and not able to do it security login create -username snapdrive -application ontapi -authmethod password -role vsadmin -vserver san1 network interface create -vserver san1 -lif san1-lif -firewall-policy mgmt -address 10.10.10.10 -netmask 255.255.255.0 -role data -data-protocol none -home-node NETAPP1 -home-port e0j snapdrive config set snapdrive san1 Password for snapdrive: Retype password: 0003-400 Admin error: Aggregate not assigned for the storage system: san1

2 4

RE: Toasters Digest, Vol 44, Issue 34
by Woods, Bill 30 Mar '15

30 Mar '15

The shelves/disk must be unowned from the original filer and owned by the new filer when you are moving from one filer to another. Regards, Bill -----Original Message----- From: toasters-bounces(a)teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of toasters-request(a)teaparty.net Sent: Friday, March 27, 2015 11:04 PM To: toasters(a)teaparty.net Subject: Toasters Digest, Vol 44, Issue 34 Send Toasters mailing list submissions to toasters(a)teaparty.net To subscribe or unsubscribe via the World Wide Web, visit http://www.teaparty.net/mailman/listinfo/toasters or, via email, send a message with subject or body 'help' to toasters-request(a)teaparty.net You can reach the person managing the list at toasters-owner(a)teaparty.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Toasters digest..." Today's Topics: 1. Re: Snapmirror relationships (Jeff Cleverley) 2. RE: Snapmirror relationships (Gelb, Scott) ---------------------------------------------------------------------- Message: 1 Date: Fri, 27 Mar 2015 16:05:07 -0600 From: Jeff Cleverley <jeff.cleverley(a)avagotech.com> To: "Parisi, Justin" <Justin.Parisi(a)netapp.com> Cc: "<Toasters(a)teaparty.net>" <Toasters(a)teaparty.net> Subject: Re: Snapmirror relationships Message-ID: <CAANBop0oKE6+mA4R81jMVbD1iVZDkjA2uE9Wrf8Eb+AixtvDeQ(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" Justin and Steve, Thanks for the information about the shares and also the cifsconfig_share.cfg file. The location I primarily support does very little CIFS. The group I inherited uses a lot of CIFS. I'm having to get up to speed on some things. The AD will be the same so that won't be a problem. I expected I would have to create shares since the FilerB volume names don't match the originals. I'll double check the security on both sides and make sure those are the same. It seems this should work either way I do it, but things don't always work as I planned them :-) Jeff On Fri, Mar 27, 2015 at 2:22 PM, Parisi, Justin <Justin.Parisi(a)netapp.com> wrote: > If you want to retain the shares, copy the file in /vol/vol0/etc > called cifsconfig_share.cfg. > > That file basically runs commands at boot that creates the shares: > > # cat cifsconfig_share.cfg > > #Generated automatically by cifs commands > > > cifs shares -add "ETC$" "/etc" -comment "Remote Administration" > > cifs access "ETC$" S-1-5-32-544 Full Control > > cifs shares -add "HOME" "/vol/vol0/home" -comment "Default Share" > > cifs access "HOME" S-NONE "nosd" > > cifs shares -add "C$" "/" -comment "Remote Administration" > > cifs access "C$" S-1-5-32-544 Full Control > > cifs shares -add "CIFS" "/vol/cifs" -comment "CIFS" > > cifs access "CIFS" S-NONE "nosd" > > If you have shares in that file already on the destination filer, > append the new shares. > > If you want to load the shares without rebooting after you add the > ones you want, use the source command. > > parisi-7mode> source /vol/vol0/etc/cifsconfig_share.cfg > > There is already a share named ETC$. > > 1 share(s) have been successfully modified > > There is already a share named HOME. > > 1 share(s) have been successfully modified > > There is already a share named C$. > > 1 share(s) have been successfully modified > > There is already a share named CIFS. > > 1 share(s) have been successfully modified > > > Snapmirror is a block for block copy of files, which includes > permissions/ACLs. If using the same domain, no issues. > > From: <Klise>, Steve <Steve.Klise(a)wwt.com> > Date: Friday, March 27, 2015 at 4:10 PM > To: Jeff Cleverley <jeff.cleverley(a)avagotech.com>, "Toasters(a)teaparty.net" > <Toasters(a)teaparty.net> > Subject: RE: Snapmirror relationships > > Not sure about the security on the volumes, but the NTFS perms > should follow, as long as its in the same AD domain, but the shares > won?t follow; you will have to recreate the shares. I would update > the disk/shelf firmware prior personally. > > > > *From:* toasters-bounces(a)teaparty.net [ > mailto:toasters-bounces@teaparty.net <toasters-bounces(a)teaparty.net>] > *On Behalf Of *Jeff Cleverley > *Sent:* Friday, March 27, 2015 12:55 PM > *To:* <Toasters(a)teaparty.net> > *Subject:* Snapmirror relationships > > > > Greetings, > > > > We have to split a cluster and one shelf will go to one site, and the > rest go to another site. The single shelf (DS4243, 2 TB SATA) > comprising 2 aggregates and 11 volumes will get moved to a different > NetApp. The shelf will end up on a system with new names and no > aliases can be used. There are some variable moving parts so I need a sanity check. > > > > FilerA 7.3.7 - owner of the one shelf > > FilerB 8.1.2P4 - soon to be owner of the one shelf > > > > I've setup a snapmirror with a daily cron update that goes from FilerA > to FilerB. This seems OK. If we can get the shelf owners to split > the same day the other moves, I'm just going to move the shelf, change > ownership, import the aggregate/volumes, create cifs shares, and > update the snapvault relationship. > > > > If they insist on moving before that, I have to break the mirrors > after a final sync, rename the current snapmirror destination volumes, > update snapvault relationships and create cifs shares. This seems OK. > > > > Now the questions :-) > > > > 1. Are there any issues associated with this process with the OS > differences or snapmirror not keeping filesystem security type, share, > permissions, etc? > > > > 2. If I have to split the shelf later, I want to add it to FilerB and > make that shelf the production shelf. This is a short term solution > and the heads and shelves are not supported. Is there a graceful way > to sync back to the DS4243 shelf? I don't want to disrupt the CIFS users very much. > > > > 3. Any other glaring issues that stand out? > > > > Thanks, > > > > Jeff > > > > > > > -- > > Jeff Cleverley > IT Engineer > > 4380 Ziegler Road > Fort Collins, Colorado 80525 > 970-288-4611 > -- Jeff Cleverley IT Engineer 4380 Ziegler Road Fort Collins, Colorado 80525 970-288-4611

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters