toasters

toasters@lists.teaparty.net

13545 discussions

converting aggregate to NAE
by Iluhes 09 Mar '22

09 Mar '22

I have 9.8 with existing data1. I want to to convert aggergate to NAE, it has volumes that are not encrypted2. I am confused, i thought you can just convert the aggrigate with one command storage aggregate modify -aggregate aggregate_name -node node_name -encrypt-with-aggr-key true It failed and I found one MDV_aud vilume which I encrypted and the aggegate conversion fails 1. Do I have to convert all volumes to NVE to encrypt the aggigate to NAE This link says that I will loose the dedup It is 2 years old, is it current? If you have existing aggregates with data on them, enabling NAE isn’t as simple as just switching it on. Every volume in the aggregate needs to be encrypted with NVE first, then you can enable NAE on the aggregate. But, if the aggregate is NAE, and all the volumes are NVE, well, you won’t get those aggregate deduplication savings (which was probably the main reason for enabling NAE in the first place.) NetApp Aggregate Encryption: Some Examples and Some Questions Answered | | | | | | | | | | | NetApp Aggregate Encryption: Some Examples and Some Questions Answered When NetApp Aggregate Encryption came out with ONTAP 9.6, there was some excitement for two reasons (the second ... | | |

1 0

Power Consumption Readings
by Alexander Griesser 25 Feb '22

25 Feb '22

Hey there, does anyone know if there's an API call or command that shows the power consumption readings? We'd like to graph the power consumption per node, cluster, shelf - whatever is possible and try to pump this data into one of our tools. I did look around a bit but am not sure how to correctly interpret the values of `sensors show`, f.ex. Most of our servers support reading the power consumption using their integrated management units and I'd like to also ready that data out of the storages. Thanks, Alexander Griesser Head of Systems Operations ANEXIA Internetdienstleistungs GmbH E-Mail: AGriesser(a)anexia-it.com<mailto:AGriesser@anexia-it.com> Web: http://www.anexia-it.com<http://www.anexia-it.com/> Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt Geschäftsführer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

1 0

7MTT - can it work with already snapmirrored volumes?
by John Stoffel 18 Feb '22

18 Feb '22

Guys, Trying to migrate from an ancient 7-mode 8.1.3 system to a slightly newer cDOT 9.5 system. I was smart and pre-snapmirrored the volumes. But I'd like for 7mtt to copy the CIFS shares and such. But... 7mtt v3.4 isn't happy with volumes which already have snapmirror relationships. The source 7-mode system has snapmirrors to both another 7-mode system, as well as to the new cDOT system VServer called 'data'. I'm stuck at "Plan and Design" "Map Volumes" where I've picked the source and destination volumes (which already exist on the destination) but which it won't let me use because there isn't enough space on the aggregeates due to the currently existing volumes. Fun. Yes, I'm probably an idiot for having done this backwards... any maybe the real answer is to just do the cutover and re-build the cifs shares by hand. Ugh.... John

4 4

Re: telnet in Azure CVOs
by Sebastian P. Goetze 03 Dec '21

03 Dec '21

What's new Cloud Manager Nov 28: Ports 8023 and 49000 are no longer open on Cloud Volumes ONTAP systems in Azure for both single node systems and HA pairs. Looks like it's fixed now... On Tue, Nov 30, 2021, 16:39 Scott Eno via Toasters <toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Scott Eno <cse(a)hey.com> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Tue, 30 Nov 2021 10:35:37 -0500 > Subject: wide open telnet on azure cluster interconnects > Hi, > > After running port scans we found that our Azure Cloud Volume ONTAP HA > pairs are accessible via passwordless telnet over the cluster interfaces > which normally would be on a private network connected to a cluster switch, > or node-to-node in switchless config. > > These CVO HA pairs were built with Cloud Manager and it **should** have > set up those interfaces to a private network instead of using the subnet > provided to it for all the other accessible interfaces. > > No question here, just for everyone's info and discussion. > > If one telnet's to the IP of a cluster interconnect, port 8023, it drops > you into the nodeshell with no authentication. I can't find an option to > disable telnet and not sure if I should. Would anything break? I don't > know. I figure the quickest solution is to set a deny for port 8023 on the > NSG for the resource group, or worst case, try to figure out how to re-ip > the cluster interconnects to a 169.. private network. > > > > ---------- Forwarded message ---------- > From: Scott Eno via Toasters <toasters(a)teaparty.net> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Tue, 30 Nov 2021 15:35:42 GMT > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

2 1

wide open telnet on azure cluster interconnects
by Scott Eno 30 Nov '21

30 Nov '21

Hi, After running port scans we found that our Azure Cloud Volume ONTAP HA pairs are accessible via passwordless telnet over the cluster interfaces which normally would be on a private network connected to a cluster switch, or node-to-node in switchless config. These CVO HA pairs were built with Cloud Manager and it **should** have set up those interfaces to a private network instead of using the subnet provided to it for all the other accessible interfaces. No question here, just for everyone's info and discussion. If one telnet's to the IP of a cluster interconnect, port 8023, it drops you into the nodeshell with no authentication. I can't find an option to disable telnet and not sure if I should. Would anything break? I don't know. I figure the quickest solution is to set a deny for port 8023 on the NSG for the resource group, or worst case, try to figure out how to re-ip the cluster interconnects to a 169.. private network.

1 0

Re:
by Graham McGeown 21 Nov '21

21 Nov '21

Silly question, but in your 'vol move' command, are you using the constituent volume as the volume to move (e.g. the vol__001) and not the actual flexgroup name? Cheers Graham On Sat, 20 Nov 2021 at 11:05, Scott Eno via Toasters <toasters(a)teaparty.net> wrote: > > > > ---------- Forwarded message ---------- > From: Scott Eno <cse(a)hey.com> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Fri, 19 Nov 2021 22:01:52 -0500 > Subject: Encrypting Flexgroup vols with NAE > Hi, > > I had to move flexgroup vols from NSE disks to NAE aggrs once, so I know I > knew how to do this then, but for the life of me I can't find it written > down anywhere. > > Basically, how does one do a "vol move start ... -encrypt-with-aggr-key" > for a flexgroup with constituents on all four aggrs in the cluster (two on > each node)? TR-4571 (Hi Justin!) seems to say this is possible, tho the > doc it links to doesn't explain how to do this with a flexgroup. > > cse > > > > ---------- Forwarded message ---------- > From: Scott Eno via Toasters <toasters(a)teaparty.net> > To: Toasters <toasters(a)teaparty.net> > Cc: > Bcc: > Date: Sat, 20 Nov 2021 03:01:57 GMT > Subject: > _______________________________________________ > Toasters mailing list > Toasters(a)teaparty.net > https://www.teaparty.net/mailman/listinfo/toasters

3 3

Encrypting Flexgroup vols with NAE
by Scott Eno 20 Nov '21

20 Nov '21

Hi, I had to move flexgroup vols from NSE disks to NAE aggrs once, so I know I knew how to do this then, but for the life of me I can't find it written down anywhere. Basically, how does one do a "vol move start ... -encrypt-with-aggr-key" for a flexgroup with constituents on all four aggrs in the cluster (two on each node)? TR-4571 (Hi Justin!) seems to say this is possible, tho the doc it links to doesn't explain how to do this with a flexgroup. cse

1 0

Security Descriptor noob question
by Carl Howell 25 Oct '21

25 Oct '21

I have a test volume with a CIFS share and default permissions. If I want to modify the NTFS permissions using either vserver security file-directory ntfs modify...or something like Ansible, how do I find the security descriptor to modify(ntfs-sd): vserver security file-directory show -vserver svm1 -path /test4 -instance Vserver: svm1 File Path: /test4 File Inode Number: 64 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10 DOS Attributes in Text: ----D--- Expanded Dos Attributes: - UNIX User Id: 0 UNIX Group Id: 0 UNIX Mode Bits: 777 UNIX Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0x8004 Owner:BUILTIN\Administrators Group:BUILTIN\Administrators DACL - ACEs ALLOW-Everyone-0x1f01ff ALLOW-Everyone-0x10000000-OI|CI|IO Feel like I'm missing something obvious here. . . Thanks, --Carl

3 5

statistics show-periodic
by Mike Thompson 23 Oct '21

23 Oct '21

can't seem to get this to work on a 9.7 box. works fine on 9.3 am I missing something obvious? pd-san2::*> set -privilege advanced pd-san2::*> statistics show-periodic -counter total-recv|total-sent|data-recv|data-sent|cluster-recv|cluster-sent|cluster-busy Error: command failed: entry doesn't exist pd-san2::*> set -privilege diag Warning: These diagnostic commands are for use by NetApp personnel only. Do you want to continue? {y|n}: y pd-san2::*> statistics show-periodic -counter total-recv|total-sent|data-recv|data-sent|cluster-recv|cluster-sent|cluster-busy Error: command failed: entry doesn't exist pd-san2::*> version NetApp Release 9.7P13: Thu Apr 15 02:06:46 UTC 2021

6 13

Tech Refresh Path for MetroCluster
by Heino Walther 14 Oct '21

14 Oct '21

Hi there We are in the process of quoting a tech-refresh of our two node Stretched MetroCluster (A8080 nodes, one at each DC) We were initially looking at a Ethernet based MetroCluster replacement, yet because of Cisco’s horrific back lock, we are more or less forced to choose another Stretched MetroCluster at the replacement. The question is if there is a recommended upgrade path for this? In a standard HA setup we normally just add the new two nodes into the existing cluster, and move volumes and LIFs… pretty easy and with no down time. But it is a bit different with a two node MC mainly because it is essentially two single node clusters. If we were to add another two nods into the existing cluster, we would also require four FC switches in order to link up the FCVI cards which is currently linked up back-to-back between the two DCs. So I see two possible ways… Headswap… from A8080 to A400 (should be possible with any down time? Just switchover, replace node, recable, reassign disks, switchback, then add new shelfs, and move volumes…) ? Parallel setup and move workloads from one to the other… (most is vmware, so not that big a deal… but there are also some critical iSCSI LUNs which will require more work) One other little possible issue is that the old cluster has a 6G Disk Loop and a 12G Disk Loop… both use the QSFP/MiniSASHD to Optical… but the old 6G loop cannot work with the A400 because to my knowledge it does not have any supported PCIe card that has QSFP connectors? (not according to HWU). But we do have four 6500N ATTO Bridges that we can use for this… so right now the plan would be the following: Introduce the ATTO 6500N bridges into the existing solution (there are plenty of fibers across the two DCs) Switchover node 1 to node 2 Headswap node 1 to A400, and recable. Reassign old node 1 disks to new node 1 Switchback node 1 (same procedure on node 2) Attach new disks to both nodes. Create new root aggr0 on new disks for both nodes (move configuration to new aggr0… (described somewhere…) Move volumes to new disks. Remove old empty aggregates and unassign Remove physical disks Any other suggestions? And have anyone else tried this? I think I read somewhere that it was actually not possible to expand a two node MC to four nodes… is that really correct? /Heino

1 0

← Newer
1
...
5
6
7
8
9
10
11
...
1355
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters