toasters

toasters@lists.teaparty.net

13520 discussions

Re:
by Stephen Stocke 24 Jun '22

24 Jun '22

Hi Steve. I've just checked our (non-Metro) clusters and I can confirm that most (probably all) the volumes that contain LUNs have nvfail set to 'on.' Certainly there are no 'non-LUN' volumes with nvfail set to on. Our transition 'through' 9.8 was directly from 9.7P13 to 9.9.1P7. We haven't had any LUNs go offline but we also haven't had any FO/GB events since the last ONTAP upgrade. HTH. Please update the list if you find out more. Kind regards Steve On Fri, 24 Jun 2022 at 14:52, Steve Kirk via Toasters <toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Steve Kirk <steve.kirk(a)sheffield.ac.uk> > To: toasters(a)teaparty.net > Cc: > Bcc: > Date: Fri, 24 Jun 2022 14:48:44 +0100 > Subject: NVFAIL - new behaviour or setting? > Hello toasters, > > I'm interested to know if anyone else has found recently that volumes > containing LUNs have gone into the 'NVFAIL' state during an ONTAP > upgrade or other event that causes an HA failover? > > It's not something we have ever specified on volume creation; > documentation suggests that it should be disabled by default however > all of our volumes containing LUNs appear to have NVFAIL enabled. My > *perception* this is a change since we upgraded to ONTAP 9.8. > > The documentation seems live under Metrocluster; our affected system > is not a Metrocluster: > > https://docs.netapp.com/us-en/ontap-metrocluster/manage/concept_monitoring_… > > It's also odd as the KB article says: > - This affords no extra protection for Storage Area Network (SAN) > hosts because SAN hosts reference LUNs by the LUN number assigned via > LUN maps and NOT by the LUN name. > - This protection was designed for file protocols, such as Network > File System (NFS) and Common Internet File System protocol (CIFS), > protect against corruption due to NVFAIL. > > Taken from here: > > https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTA… > > So it also seems like either the setting or the documentation is the > wrong way round to me... > > Looking for feedback to see if anyone else has experienced this or if > there's something obvious we've missed before I raise a support call. > > Cheers, > Steve > > > > ---------- Forwarded message ---------- > From: Steve Kirk via Toasters <toasters(a)teaparty.net> > To: toasters(a)teaparty.net > Cc: > Bcc: > Date: Fri, 24 Jun 2022 14:49:13 +0100 > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

2 1

NVFAIL - new behaviour or setting?
by Steve Kirk 24 Jun '22

24 Jun '22

Hello toasters, I'm interested to know if anyone else has found recently that volumes containing LUNs have gone into the 'NVFAIL' state during an ONTAP upgrade or other event that causes an HA failover? It's not something we have ever specified on volume creation; documentation suggests that it should be disabled by default however all of our volumes containing LUNs appear to have NVFAIL enabled. My *perception* this is a change since we upgraded to ONTAP 9.8. The documentation seems live under Metrocluster; our affected system is not a Metrocluster: https://docs.netapp.com/us-en/ontap-metrocluster/manage/concept_monitoring_… It's also odd as the KB article says: - This affords no extra protection for Storage Area Network (SAN) hosts because SAN hosts reference LUNs by the LUN number assigned via LUN maps and NOT by the LUN name. - This protection was designed for file protocols, such as Network File System (NFS) and Common Internet File System protocol (CIFS), protect against corruption due to NVFAIL. Taken from here: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTA… So it also seems like either the setting or the documentation is the wrong way round to me... Looking for feedback to see if anyone else has experienced this or if there's something obvious we've missed before I raise a support call. Cheers, Steve

1 0

(no subject)
by Iluhes 12 Mar '22

12 Mar '22

What is going with netapp and NAE encryption, none of the documenation make sense to me anymore.I see you should be able to move non ecrypted volume into NAE aggigate, but I cannotI get error, non-encrypted volumes are not supported in such aggegatesAll i want is to have NAE encryption, and volumes in the NAE aggr to be not encrypted so I can have aggr level dedup On Wednesday, March 9, 2022, 07:48:41 AM CST, Iluhes via Toasters <toasters(a)teaparty.net> wrote: Thanks, but before last step I will blow up space, right?At the moment that all volume are NVE I loose cross volume dedup and that what I cannot afford.How can I account how much space for any aggregate I will “loose” if there is no cross volume dedup On Mar 9, 2022, at 3:06 AM, Tim McCarthy <tmacmd(a)gmail.com> wrote: First, enable a key managerThen convert all data volumes to NVEvolume encrypt start …. After that, be sure any svm root volumes have been moved to the same aggregate. Then convert the aggregates without the svm to NAE -> aggregate modify -aggregate xx -encrypt Move the svm rootVol move start -volume svmroot -dest aggr-nae -encrypt-with-aggr-key true Encrypt the last aggregate Now convert all the volumes to nae:Vol move start -Vol xx -dest same-as-source -encrypt-with-aggr-key true If you do not do the last step, you will not have full NAE. There is a kb about this as well Get Outlook for iOSFrom: Toasters <toasters-bounces(a)teaparty.net> on behalf of Iluhes via Toasters <toasters(a)teaparty.net> Sent: Tuesday, March 8, 2022 11:20:29 PM To: Toasters <toasters(a)teaparty.net> Subject: _______________________________________________ Toasters mailing list Toasters(a)teaparty.net https://www.teaparty.net/mailman/listinfo/toasters_________________________… Toasters mailing list Toasters(a)teaparty.net https://www.teaparty.net/mailman/listinfo/toasters

2 1

SVM-DR power or best practices guide?
by Scott Eno 10 Mar '22

10 Mar '22

Anyone know of a TR for SVM-DR best practices or power guide? The info in the ONTAP docs isn't very specific on technical details.

1 0

Re:
by Tim McCarthy 09 Mar '22

09 Mar '22

First, enable a key manager Then convert all data volumes to NVE volume encrypt start …. After that, be sure any svm root volumes have been moved to the same aggregate. Then convert the aggregates without the svm to NAE -> aggregate modify -aggregate xx -encrypt Move the svm root Vol move start -volume svmroot -dest aggr-nae -encrypt-with-aggr-key true Encrypt the last aggregate Now convert all the volumes to nae: Vol move start -Vol xx -dest same-as-source -encrypt-with-aggr-key true If you do not do the last step, you will not have full NAE. There is a kb about this as well Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Toasters <toasters-bounces(a)teaparty.net> on behalf of Iluhes via Toasters <toasters(a)teaparty.net> Sent: Tuesday, March 8, 2022 11:20:29 PM To: Toasters <toasters(a)teaparty.net> Subject: _______________________________________________ Toasters mailing list Toasters(a)teaparty.net https://www.teaparty.net/mailman/listinfo/toasters

2 1

converting aggregate to NAE
by Iluhes 09 Mar '22

09 Mar '22

I have 9.8 with existing data1. I want to to convert aggergate to NAE, it has volumes that are not encrypted2. I am confused, i thought you can just convert the aggrigate with one command storage aggregate modify -aggregate aggregate_name -node node_name -encrypt-with-aggr-key true It failed and I found one MDV_aud vilume which I encrypted and the aggegate conversion fails 1. Do I have to convert all volumes to NVE to encrypt the aggigate to NAE This link says that I will loose the dedup It is 2 years old, is it current? If you have existing aggregates with data on them, enabling NAE isn’t as simple as just switching it on. Every volume in the aggregate needs to be encrypted with NVE first, then you can enable NAE on the aggregate. But, if the aggregate is NAE, and all the volumes are NVE, well, you won’t get those aggregate deduplication savings (which was probably the main reason for enabling NAE in the first place.) NetApp Aggregate Encryption: Some Examples and Some Questions Answered | | | | | | | | | | | NetApp Aggregate Encryption: Some Examples and Some Questions Answered When NetApp Aggregate Encryption came out with ONTAP 9.6, there was some excitement for two reasons (the second ... | | |

1 0

Power Consumption Readings
by Alexander Griesser 25 Feb '22

25 Feb '22

Hey there, does anyone know if there's an API call or command that shows the power consumption readings? We'd like to graph the power consumption per node, cluster, shelf - whatever is possible and try to pump this data into one of our tools. I did look around a bit but am not sure how to correctly interpret the values of `sensors show`, f.ex. Most of our servers support reading the power consumption using their integrated management units and I'd like to also ready that data out of the storages. Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

7MTT - can it work with already snapmirrored volumes?
by John Stoffel 18 Feb '22

18 Feb '22

Guys, Trying to migrate from an ancient 7-mode 8.1.3 system to a slightly newer cDOT 9.5 system. I was smart and pre-snapmirrored the volumes. But I'd like for 7mtt to copy the CIFS shares and such. But... 7mtt v3.4 isn't happy with volumes which already have snapmirror relationships. The source 7-mode system has snapmirrors to both another 7-mode system, as well as to the new cDOT system VServer called 'data'. I'm stuck at "Plan and Design" "Map Volumes" where I've picked the source and destination volumes (which already exist on the destination) but which it won't let me use because there isn't enough space on the aggregeates due to the currently existing volumes. Fun. Yes, I'm probably an idiot for having done this backwards... any maybe the real answer is to just do the cutover and re-build the cifs shares by hand. Ugh.... John

4 4

Re: telnet in Azure CVOs
by Sebastian P. Goetze 03 Dec '21

03 Dec '21

What's new Cloud Manager Nov 28: Ports 8023 and 49000 are no longer open on Cloud Volumes ONTAP systems in Azure for both single node systems and HA pairs. Looks like it's fixed now... On Tue, Nov 30, 2021, 16:39 Scott Eno via Toasters <toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Scott Eno <cse(a)hey.com> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Tue, 30 Nov 2021 10:35:37 -0500 > Subject: wide open telnet on azure cluster interconnects > Hi, > > After running port scans we found that our Azure Cloud Volume ONTAP HA > pairs are accessible via passwordless telnet over the cluster interfaces > which normally would be on a private network connected to a cluster switch, > or node-to-node in switchless config. > > These CVO HA pairs were built with Cloud Manager and it **should** have > set up those interfaces to a private network instead of using the subnet > provided to it for all the other accessible interfaces. > > No question here, just for everyone's info and discussion. > > If one telnet's to the IP of a cluster interconnect, port 8023, it drops > you into the nodeshell with no authentication. I can't find an option to > disable telnet and not sure if I should. Would anything break? I don't > know. I figure the quickest solution is to set a deny for port 8023 on the > NSG for the resource group, or worst case, try to figure out how to re-ip > the cluster interconnects to a 169.. private network. > > > > ---------- Forwarded message ---------- > From: Scott Eno via Toasters <toasters(a)teaparty.net> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Tue, 30 Nov 2021 15:35:42 GMT > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

2 1

wide open telnet on azure cluster interconnects
by Scott Eno 30 Nov '21

30 Nov '21

Hi, After running port scans we found that our Azure Cloud Volume ONTAP HA pairs are accessible via passwordless telnet over the cluster interfaces which normally would be on a private network connected to a cluster switch, or node-to-node in switchless config. These CVO HA pairs were built with Cloud Manager and it **should** have set up those interfaces to a private network instead of using the subnet provided to it for all the other accessible interfaces. No question here, just for everyone's info and discussion. If one telnet's to the IP of a cluster interconnect, port 8023, it drops you into the nodeshell with no authentication. I can't find an option to disable telnet and not sure if I should. Would anything break? I don't know. I figure the quickest solution is to set a deny for port 8023 on the NSG for the resource group, or worst case, try to figure out how to re-ip the cluster interconnects to a 169.. private network.

1 0

← Newer
1
2
3
4
5
6
7
8
...
1352
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters