#╰・software

1 messages · Page 3 of 1

molten sable
#

quick question about NetApp Data Broker. To close the log4j vulnerability I just found documentation about SnapCenter Plug-in for VMware vSphere. Was the product renamed?
I just want to make sure I dont mix up anything before I go ahead 🙂
I assume I can simply upgrade Data Broker to SnapCenter Plug-in for VMware vSphere 4.5?

tough rain
tame marten
#

Please can anyone assist me with this? Trying to enable SMB for file share and keep getting this error

dim roost
#

Set up DNS first.

#

Is this a new system or an existing one? You should be able to get Professional Services to help you.

tame marten
#

New system

dim roost
#

Also, about the conversation above, I wasn't awake lol. For SQL, FlexGroups do work but if the database is one file then it will still be a single volume bottleneck.

#

If the database is split among multiple files it will get split up.

tame marten
#

Any idea where I can get professional services from?

dim roost
#

Account team can help with that.

tame marten
#

would NetApp support team be able to help with this?

dim roost
#

As a TSE, no.

#

*I can answer that for you, no.

tame marten
#

How can I get in touch with the account team?

dim roost
#

Hmm, good question lol. 1 minute. I think I wrote a KB on this.

tame marten
#

Thank you Paul

dim roost
#

You'll have to sign in to see the rest.

#

Where did you buy the filer from?

tame marten
dim roost
#

Like...from NetApp directly, a reseller, eBay?

tame marten
#

it was from a reseller

dim roost
#

Ok, the reseller should be able to hook you up then.

#

Usually PS is included with a sales PO.

tame marten
#

on the order it does state 1 year support

dim roost
#

Not same thing.

#

Got serial # or PO #?

tame marten
#

952122001682 and 952122001715 2 nodes

dim roost
#

Weird no PS listed. I'd contact the reseller.

tame marten
#

ok will try that

#

DNS is already setup

dim roost
#

On the data SVM?

#

Also you might remove your screenshots.

#

PII and all.

tame marten
#

sorry I don't understand

#

should I not be sending screenshots?

dim roost
#

PII=personally identifiable information

#

No, just might use Paint to crop out the sensitive info.

tame marten
#

ok will do in the future

#

But thats showing on the Cluster overview in the GUI

dim roost
#

Hmm.

#

Do a dns show from the CLI. See if your data SVM (not cluster one) is showing a DNS server.

tame marten
#

its showing the cluster

dim roost
#

Ok you need to add for your data SVM.

#

Like on my vsim...

#

pstejska_vsim::> dns show
Name
Vserver Domains Servers


pstejska_vsim 10.x.y.z,
8.8.8.8
svm0 10.a.b.c

tame marten
#

should it be created on both aggregates

#

?

dim roost
#

Huh? Aggregates?

#

Aggregate is just the group of disks for volumes to go into.

#

A SVM is just the logical storage server (Storage Virtual Machine or vServer, same thing) that all data is served out of. It spans the cluster.

tame marten
#

vserver create -vserver svm0

#

I've done that

dim roost
#

Ok do dns create for svm0

#

Original naming btw. :p

tame marten
#

Im going to re do it lol

#

just getting to know the system, I am new new to this

#

dns show still only show the cluster btw

dim roost
#

pstejska_vsim::> dns create -vserver svm0 -domains <redacted> -name-servers <redacted>

tame marten
#

Ok will try it again

#

Its getting to the end of the day, will give this a go tomorrow and see how I get on

dim roost
#

Ok.

tough rain
quaint ether
#

So you 0$ the PS?

#

or you mean netapp ps

dim roost
#

No, they are "PS".

#

Not NetApp PS, but reseller PS.

tough rain
#

Y, we don't buy NetApp PS and offer our own PS of course 😉

urban spear
#

Yeah, that makes a lot of sense. In this case it looks like the customer has been left to do it their selves

tough rain
#

This doesn't make a lot of sence 😄 ONTAP isn't that easy to understand 😄

urban spear
#

Yeah, sadly it happens. I’m sure we will get them some help or at least talking to the right people

meager vector
tame marten
#

I've done dns check -vserver Ramsdens and get the following:
Vserver Name Server Status Status Details


Ramsdens <MyDNSServer> up Response time (msec): 2
Ramsdens <MySecDNSServer> up Response time (msec): 17

urban spear
#

Do you have a route for the SVM?

tame marten
#

Ramsdens::> vserver show
Admin Operational Root
Vserver Type Subtype State State Volume Aggregate


Ramsdens admin - - - - -
Ramsdens-01 node - - - - -
Ramsdens-02 node - - - - -
VS01 data default running running VS_Root Ramsdens_
02_SSD_1
svm0 data default running running svm0_root Ramsdens_
01_SSD_1

tough rain
tough rain
tame marten
#

get the following ^

tame marten
#

should I behaving something on the destination? if so what IP, any specific?

tough rain
# tame marten get the following ^

As you have an IP address configured it is most likely a VLAN config issue.
It’s a bit too much to troubleshoot via Discord… what ports are in your Broadcast Domain „Default-1“ shown in the screenshot you posted yesterday. How does the network switch config look like on that ports. Are vlans tagged or native etc.

tough rain
tame marten
#

No vlan;s been configured

#

Ramsdens::> network port show

Node: Ramsdens-01
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Default up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default Default-1 up 1500 auto/10000 healthy
e0d Default Default-2 up 1500 auto/10000 healthy
e0e Default - down 1500 auto/- -
e0f Default - down 1500 auto/- -

Node: Ramsdens-02
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Default up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default Default-1 up 1500 auto/10000 healthy
e0d Default Default-1 up 1500 auto/10000 healthy
e0e Default - down 1500 auto/- -
e0f Default - down 1500 auto/-

urban spear
#

The L2 network configuration on Ramsdens-01 is different to Ramsdens-02 by the looks of it. Not sure that will be impacting anything here but its worth pointing out.

meager vector
tame marten
#

broadcast*

urban spear
#

Yeah, it creates a new broadcast domain when it can’t detect other interfaces at L2 on the existing broadcast domain

tame marten
#

I think my issue atm is trying to configure dns on the SVM

#

This is what I am getting

urban spear
#

Yeah this is going to get difficult to diagnose over discord. Did the partner you purchased from not offer any installation and handover services at all? I would get them to send someone in to go through all the install with you and guide you through the basics.

tame marten
#

Unfortunately they didn't and its left up to me to figure out 😦

dim roost
#

Now you can open a support case as it's no longer initial setup but break fix.

tough rain
pearl nacelle
#

A question about ONTAP Select, as far as I understand I can select three networks when deploying a 2-node Cluster in the deployment utility. The Cluster/Internal Network is assigned to e0c/e0d, the management Network to e0a and the Data-Network on e0b. When I use VGT in ESX, is it possible to use Multiple VLANs on ONTAP Select level vor this? For Example e0b-10, e0b-20, e0b-30...

cosmic cave
#

sure. connect your data lifs to a portgroup on vlan4095 (vlan trunk), then peel off the vlans inside ONTAP just like you would a hardware appliance. The one thing that doesn't work it link aggregation. If you need that it has to be done at the ESX host.

pearl nacelle
#

thanks

cosmic cave
#

I'm running a HA pair in that config. e0a/e0b are data, e0g is management, the rest are either cluster network, or syncmirror, or vnvram mirroring.

#

I have a couple of vlans configured, one of which, -254 is in a separate ipspace I use for snapmirror traffic

pearl nacelle
#

how can e0g be management my thought was it is autoassigned by the deploy utillity to e0a, data e0b, cluster e0c/e0d, ha e0e, nv e0f

#

or is it possible to customize this

cosmic cave
#

deploy may behave differently if you choose to put management and data on the same port group

#

like I did here

pearl nacelle
#

ah ok

cosmic cave
#

if you split them up e0a will land on the management port group

#

this is the one that has to be able to reach the deploy server

tame marten
cosmic cave
#

Start by correcting the upstream switching. Then move the ports into the intended broadcast domain. Then move the lifs to the intended ports. Then validate connectivity/routing between vserver management lifs and their respective DNS servers, etc. While you're at it make sure the cluster and node management IPs can also reach DNS, NTP, etc.

tame marten
#

I had 2 delete the lif's to rectify the broadcast domain issue as Default-2 no longer exist and the port that was on there has been moved to Default-1 broadcast domain. I can ping from each 2 nodes to my DNS, router, cluster and node management IP, I just cant ping the lif that I created.

cosmic cave
#

Let's see an updated net port show, net int show, and route show

dim roost
#

Just open a case. Then Support can get on a Zoom and fix it.

#

Guarantee L2 NAS would have you up and running in maybe 30m max.

cosmic cave
#

Broadcast domain changes are a good indication the upstream network has converged, so yeah. Support should be able to sort it out quickly.

plush storm
tame marten
# cosmic cave Let's see an updated net port show, net int show, and route show

Node: Ramsdens-01
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Default up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default Default-1 up 1500 auto/10000 healthy
e0d Default Default-1 up 1500 auto/10000 healthy
e0e Default - down 1500 auto/- -
e0f Default - down 1500 auto/- -

Node: Ramsdens-02
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Default up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default Default-1 up 1500 auto/10000 healthy
e0d Default Default-1 up 1500 auto/10000 healthy

Node: Ramsdens-02
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0e Default - down 1500 auto/- -
e0f Default - down 1500 auto/- -
14 entries were displayed.

e0e and e0f is not used

tame marten
tame marten
#

I created a datalif on Node1 e0c, with an IP of 172.16.10.184/23, Gateway: 172.16.10.1 in Default-1 broadcast domain, even though this datalif shows status up/up, it cannot ping anything apart from the same IP on Node2. I also tried doing this:
network route create -vserver svmfiler -destination 172.16.10.184/255.255.254.0 -gateway 172.16.10.1. But still not pining, No issues with the switches they are connected to as the failover works if I remove the cable. Any ideas?

dim roost
#

If 172.16.10.1 is the gateway, the destination should be 0.0.0.0/0

#

You add the IP address with "network interface create -address 172.16.10.184 -netmask 255.255.254.0 ...."

tame marten
dim roost
#

In routing prefix, 0.0.0.0/0 is anything.

#

Yes you'll need a gateway but you were doing it wrong.

tame marten
#

I was only trying to set a static route to see if it makes a difference. Should the SVM also show up on "net route show" as it does not

dim roost
#

Yes.

#
pstejska_vsim::*> net route show
  (network route show)
Vserver             Destination     Gateway         Metric
------------------- --------------- --------------- ------
pstejska_vsim
                    0.0.0.0/0       10.216.33.1     20
svm0
                    0.0.0.0/0       10.216.33.1     20
2 entries were displayed.

pstejska_vsim::*>
tame marten
#

route added manually:
Ramsdens::> net route create -vserver svmfiler -gateway 172.16.10.1
(network route create)

Ramsdens::> net route show
(network route show)
Vserver Destination Gateway Metric


Ramsdens
0.0.0.0/0 172.16.10.1 20
svmfiler
0.0.0.0/0 172.16.10.1 20

dim roost
#

Ok looks good.

tame marten
#

still no pings, wondering why some ports are showing as:
Ramsdens::> broadcast-domain show -instance
(network port broadcast-domain show)

           IPspace Name: Cluster

Layer 2 Broadcast Domain: Cluster
Configured MTU: 9000
Ports: Ramsdens-02:e0a
Ramsdens-02:e0b
Ramsdens-01:e0a
Ramsdens-01:e0b
Port Update Status: error
error
complete
complete
Status Detail Description: error: details not available
error: details not available
complete
complete

#

I may try a reboot of all devices

dim roost
#

So the LIF on e0c can only ping the HA partner?

tame marten
#

thats correct

dim roost
#

Why a subnet mask of /23?

tame marten
#

same IP on the HA partner

#

thats just the local subnet range

#

it will be /24 once live

dim roost
#

What is your router set to?

tame marten
#

172.16.10.1

dim roost
#

That seems like that could cause problems.

#

If your network is /24, set it to /24.

tame marten
#

my current network that I am configuring it for testing purposes is /23

#

I will have to reconfigure it when its in the live environment to /24

dim roost
#

Hmm.

#

I wonder if it being in a different broadcast domain is why?

#

Reconfigure it to be in the default broadcast domain.

tame marten
#

thats what I was thinking, should I just delete Default-1 and move the ports to Default broadcast dom?

dim roost
#

Broadcast domains are a terrible name because it collides with the industry standard term, but it's a NetApp specific term that allows for multiple tenants.

#

yes.

#

So you could have company1 with IP 10.1.2.3 on e0c, but company2 with IP 10.1.2.3 on e0d for example.

tame marten
#

ok understood, I shall give it ago

dim roost
#

Cool.

#

I think you'll have to delete the LIF.

#

You may not, IDK.

plush storm
#

How are ports e0a and e0b cabled?

dim roost
#

No, it's because e0c/e0d are in default-1 broadcast domain

#

Not default

plush storm
#

(Partner only so can't confirm this system in Smartsolve)

#

But in his Cmd above ports e0a and e0b of the node2 showed error

dim roost
#

They're fine now.

meager vector
#

can someone explain the logic behind the graphs in a way that justifies it? (not a production system but same concept applies to every single FAS or AFF we have in production)

quaint ether
#

the 72TB part?

meager vector
#

yah i get what its trying to say but its just dumb to me

quaint ether
#

Yeah it's just trying to show the storage eff.

#

this is 9.8 on a FAS -

meager vector
#

i miss this

meager vector
#

9.9 shows used and reserved which pleases me

#

some of are systems are on 9.9 already

quaint ether
#

I've heard the calulation on the aggr comment a few times, i know several SEs have submitted a request to include a toggle etc on it.

meager vector
#

i dont like "logical" used because that doesnt make sense either to me

#

yah its just a nitpicky feedback thing

#

while i care about space savings the metric that matters is actual consumption

#

i could have be deduping 8billion to 1

quaint ether
#

well after the 9.8 transition there was a lot of.. "feedback" from the whole of the community. So they are trying to make enhancements based on said feedback.

meager vector
#

yah i gave my rep feedback lol

#

i can say that im super excited for ontap 9.12!

meager vector
#

im a big fan of this tho

quaint ether
meager vector
#

i wasnt professional at all, we almost returned our last purchase lol 9.8+ is objectively trash but thats part of why im here, to talk about some of these issues i have with it and instead of complaining getting feedback to maybe make sense of it, i can accept change if it makes sense, i cant accept it just for the sake of being different

quaint ether
#

that was a smartass comment back to @dim roost 🙂

meager vector
#

oh yah i got it, im just refering to my coversation with our rep

#

lol

dim roost
#

I like the look of the UI better, but they shouldn't have taken away everything.

meager vector
#

i used classic mode in 9.7 until the last second

quaint ether
#

I do like that newer versions you can upload (most) firmware via the gui

meager vector
#

renaming (only in the interface for some reason) aggregates to tiers is just kinda just a malicious change done for the sole purpose to piss people off is the only way i see it tbh

meager vector
quaint ether
#

yeah I still look for aggrs when I log in.

pallid willow
#

NetApp is constantly being slagged by the competition for being "too complex" so the GUI was "simplified" in an attempt to disprove the fud, there may have been a bit of an overcorrection there.

quaint ether
#

yeah, there's a lot of marketing out there "well it only takes us "Storage vendor X" 2 clicks to deploy a lun.

meager vector
#

takes 1 click for some entry level tech managing your easy storage to take down the entire environment too lol

#

i dont really know the sales demographics of netapp storage, but everyone i know that manages netapp's on a day to day are engineer/architect level people

quaint ether
#

depends.

dim roost
#

I've got a case where a DBA is working on a CVO and is the main contact.

quaint ether
#

but yeah, usually storage admins, but i've had customers that are 2-3 people in the whole of IT. and they just want to present out shares and luns.

dim roost
#

Same ^^^

meager vector
#

oof

#

i dunno maybe have a switch in the UI for "expert mode" vs "easy mode"

#

easy mode is a green button that says make stuff happen

quaint ether
#

that request is high up there 🙂

meager vector
#

have entry level units ship with easy mode as default

#

have bigger units ship with expert mode as default

quaint ether
#

or the CLI 🙂

meager vector
#

cli is fine up until you're literally forced for various reasons to use the gui and then ironically some features force you to use the cli lol

quaint ether
#

i used it for snapmirrors and peering. cause it's just 10x easier in the gui.

dim roost
#

Agreed.

meager vector
#

i have to use cli for it

quaint ether
#

yeah. snaplock too. I think a lot of that though is to prevent folks from accidentally doing something.

meager vector
#

just kinda drives me crazy making snapmirror the default, let me choose whats best for my company plz k thnx lol

#

(we dont want to use mirrorandvault)

#

also while im talking about it, I would like to see snapmirror relationship info on both sides plz

#

makes no logical sense to me that you can see every relationship on the destination but cant see crap on the source

#

thats just been a thing forever tho not really a specifc version issue.. just something i want

plush storm
elfin sequoia
#

Not a big fan of the new ui, but the changes from 9.7-9.9.1 were in the right direction I feel, haven't looked at the 9.10 yet tough.
As long as they don't mess up the cli it has little impact on me since I do almost everything there
Still wish I could add comments to vlans though

meager vector
cosmic cave
#

Snapmirror in the new gui is endlessly frustrating. I can sympathize.

plush storm
humble tulip
#

I can't remember the last time I used the UI

meager vector
#

I can it was about 30 minutes ago when yet another issue forced me out of the cli and had to provision aggregate from the UI

tame marten
winter jetty
#

Hi ! Anyone know an estimated release time of snapcenter-Vcenter plugin 4.6 that suports Vcenter 7 Update 3 ?

gusty ocean
#

Is where someone wo can help me. I nead for a emergency recovery the SANtricity Software. We have lost the system for Manage our Storage

obtuse fable
#

Except for the perty graphs, I CLI everything anymore. It’s usually faster and I have significantly more control

dim roost
tame marten
# dim roost Did you get it working?

So I removed the Default-1 broadcast domain and added the ports into Default Broadcast domain with the ports e0m from node1 and node2 and recreated the lif but still no Ping capabilities. I logged a case for my previous dns issue and they suggested that I create VLAN's but I wasnt sure how VLAN's going to help me in this case

dim roost
#

Dang. I wonder why pings aren't working. That's bizarre.

tame marten
#

just wondering, it doesnt matter which ports are in cluster does it? ie node1 e0a and e0b and node2 e0a and e0b?

dim roost
#

Yeah depends on what HWU says.

tame marten
#

according to the setup guide, it state use e0a and e0b from both nodes for the cluster

dim roost
#

Yep, taht

#

That's right

#

When did you configure the default broadcast domain today?

#

Latest ASUP still shows default-1 but that was 10:30 UTC.

tame marten
#

That new default-1 was created when I tried the vlans

#

I since deleted them

meager vector
obtuse fable
#

Like I said in another post: I always use the CLI. It’s faster for me, I get more details and I control what I see.

#

What is the switch? Is it set to access ports? Is it the correct vlan? Is it set to trunk? If so are you using the correct native vlan or the correct tagged VLANs?

#

@tame marten You May want to delete the ports from the broadcast domain again. Then either wait or let ontap try to place them. After a few minutes, look at the log files (vifmgr) and see what ontap is or isn’t detecting

#

There is a new network command to force the scan again. I think it may try automatically after a few minutes

meager vector
#

I don't enjoy typing constantly to see things that you could normally just have up as a reference graphically on a second screen, as I said in an earlier post there are too many issues forcing the use of the GUI and I'm going to have to swap back and forth frequently anyway, which is how i know that youre not being entirely forthcoming in your comments about only using the CLI or you're not using enough of it to encounter these issues, maybe just maybe you people realize that people do things differently and functionality that exists somewhere else entirely is not a solution.... its like having a car with no seats and you're overhere telling me its fine because i have seats in my truck

tame marten
#

I have also tried removing the ports from the broadcast domain and putting it into the default one

dim roost
#

What's the subnet mask of the gateway on the router/switch?

tame marten
#

255.255.254.0 for both

obtuse fable
#

I agree. If I got better details from the gui I might use it. For instance the screen on the space utilization is not good faking the saved space by rehydrating all snapshots giving a false sense of savings. That didn’t happen until recently and it was done due to competition. I get everything on the cli. You can ask ANY of the customers I work with. They start with the gui and I immediately have them go cli. I get everything I need there. I hate hunting through the ever changing gui to find anything. You are right there is one thing I use the gui for: firmware/ontap updates(since I no longer need a web server to do it)

dim roost
#

Have you got any tcpdumps yet?

obtuse fable
#

@tame marten so no VLANs on the switch, have you verified the port setup? I can’t tell you how many times someone thought it was correct to find or something was actually off.

dim roost
#

Ah the LIF on e0d is on a different SVM.

#

Does e0c ping ok?

#

I think it may be time to gather tcpdumps if you haven't already.

#

[?] Mon Jan 17 16:01:32 +0000 [Ramsdens-01: vifmgr: vifmgr.bcastDomainPartition:error]: Broadcast domain Default is partitioned into 3 groups on node Ramsdens-01. The different groups are: {e0M}, {e0c}, {e0d}. LIFs hosted on the ports in this broadcast domain may be at the risk of seeing connectivity issues.

#

hmm..

#

This message occurs when the l2_reachability health monitor detects that the specified broadcast domain is partitioned; not all local ports in the broadcast domain have mesh Layer 2 connectivity to all other local ports in the broadcast domain. LIFs hosted on the ports in this broadcast domain might be at risk for connectivity issues.

#

Yeah I'm thinking switch config may be the issue here. I don't know HPE or I'd help you out.

#

Any VLANs?

#

I mean port chnanels.

obtuse fable
#

That could do it. I had a customer last week accidentally turn up a port channel on their switch and it caused all sorts of issues (2 ports on each controller in the same Port channel!). As soon as the port channel was removed from the ports on the switch everything worked again

tame marten
tame marten
#

This is sort of the cabling, but in my case I have the e0m and Power connected on both nodes

dim roost
#

Maybe can we see your switch config? IDK.

tame marten
#

I can ping switch IP from the default Ramsdens SVM and 2 servers connected to the switches

dim roost
#

ONTAP looks right from what I can tell.

tame marten
#

This is just for port 16

#

but its the same for all ports

dim roost
#

And the servers are also /23?

tame marten
#

correct

dim roost
#

I mean is there something like "show run" for the HPE switch?

tame marten
#

I have been configuring the switches in the GUI, just accessed it from cli for the first time

#

I will need to learn some of these commands to figure it out

#

but no show run

dim roost
#

:\

tame marten
#

there seems to be a default vlan with all the ports though

dim roost
#

Ok good.

obtuse fable
#

I’d say you’re complicating connectivity a bit. I’d do e0c to the same switch and e0d to the same switch. Less confusion. Is there a link between the two switches? Is that set up properly? I don’t recall from above, can e0c on left node ping e0d on right node?

#

Also, maybe simplify a whole lot more. Create temporary fake lifs on the ports: 192.168.99.11-14 netmask 255.255.255.0? Then try pinging between those and see what’s going on. If they are access ports, any ip should work

#

No gateway, just simple ping.

tame marten
obtuse fable
#

I’ve done testing like this. For simplicity I use service-policy default-management and put them in the admin svm. Once I figure things out for my customer, we just delete them

dim roost
#

Good idea!

obtuse fable
#

Yeah. Eliminate whatever I can and KISS.

dim roost
#

That or get tcpdumps of the pings so we can see if ONTAP is even getting the pings.

obtuse fable
#

I’m with you though @dim roost I’d love to see the running config from the switch cli. GUI may be misleading

lime sun
#

anyone tried configuring LDAP on ONTAP 9.9 yet? configured on CLI correctly to the designated SVM -- doesn't work (GUI vserver LDAP settings shows not configured)

only works after configuring from GUI

urban spear
#

Haven’t seen that, have built 5-6 clusters on 9.9.1 the last few months. Specific patch version?

meager vector
noble tusk
#

Can anyone from NetApp let me know if customers are meant to have access to Fusion?

#

The answer is "No", found in Fusion FAQ.

tame marten
#

so In which case, switches are fine, maybe the issue is with the svm that I created manually?

urban spear
# lime sun 9.9.1P2

Did you raise a case at all? I've just checked the most recent 9.9.1P3 system I've built and didn't hit that issue. I have another one I'm doing on Wednesday and will try replicate the issue.

obtuse fable
#

@tame marten what does “broadcast-domain show” look like? Try running this:
Network port reachability repair -node node-01 -port e0c
Repeat for e0c/e0d on both nodes. Wait about five minutes and do the broadcast-domain show again

tame marten
#

Name Domain Name MTU Port List Status Details


Cluster Cluster 9000
Ramsdens-02:e0a error: details not available
Ramsdens-02:e0b error: details not available
Ramsdens-01:e0a complete
Ramsdens-01:e0b complete
Default Default 1500
Ramsdens-02:e0M complete
Ramsdens-02:e0c complete
Ramsdens-02:e0d complete
Ramsdens-01:e0M complete
Ramsdens-01:e0c complete
Ramsdens-01:e0d complete
2 entries were displayed.

#

Im not sure why the top 2 ports show as error details not avail, If I check the ports, they are showing as up/up

#

Also Ive done the repair thing above, so will wait and see what happens

obtuse fable
#

So just thinking here. Create two data lifs. Please share thethe commands you are using. One LIF on node-01/e0c. The other on node-02/e0d. Leave the node-01/e0c one alone and use that at the source for a ping. Ping the other you created. If it works migrate the node-02/e0d to node-02/e0c. Try the ping again. If it works then move to node-01/e0d. If they all work then the Netapp is able to talk to each of the interfaces properly and the external communication is the issue

tame marten
#

I created 2 vservers: svmfiler and iSCSIsvm. So its worth mentioning that I've tried creating 4 additional lifs for each port (n1/e0c&e0d and n2/e0c&e0d) in the svmfiler with /23 (same as cluster) and these lifs can ping each other and the lif on iSCSIsvm. However it cant ping the cluster managment IP or the node managment IP

#

In the grand scheme of things, thinking out loud, it wont be able to ping either the cluster or the node IP since the lifs have no gateway defined

obtuse fable
#

Same subnet does not require a gateway

#

You do have a gateway defined for the admin svm and by proxy then the node mgmt ips since they are part of the admin svm

#

svmfiler
0.0.0.0/0 172.16.10.1 20

#

Right?

tame marten
#

thats correct

obtuse fable
#

I think it was asked: maybe a “network interface show” at this point May help

tame marten
#

Ramsdens::> net int show
(network interface show)
Logical Status Network Current Current Is
Vserver Interface Admin/Oper Address/Mask Node Port Home


Cluster
Ramsdens-01_clus1
up/up 169.254.239.229/16 Ramsdens-01 e0a true
Ramsdens-01_clus2
up/up 169.254.85.36/16 Ramsdens-01 e0b true
Ramsdens-02_clus1
up/up 169.254.176.208/16 Ramsdens-02 e0a true
Ramsdens-02_clus2
up/up 169.254.30.206/16 Ramsdens-02 e0b true
Ramsdens
Ramsdens-01_mgmt1
up/up 172.16.10.181/23 Ramsdens-01 e0M true
Ramsdens-02_mgmt
up/up 172.16.10.182/23 Ramsdens-02 e0M true
cluster_mgmt up/up 172.16.10.180/23 Ramsdens-01 e0M true
iSCSIsvm
lif_iSCSIsvm_429
up/up 172.16.10.187/23 Ramsdens-02 e0d true
lif_iSCSIsvm_472
up/up 172.16.10.186/23 Ramsdens-01 e0d true
svmfiler
FilerLif up/up 172.16.10.183/23 Ramsdens-01 e0c true

#

if this is easier to read

obtuse fable
#

Ok. So using Ramsdens-01_mgmt1 a the source, try to ping 172.16.10.180 then 172.16.10.181 then 172.16.10.182. That should confirm the e0M connectivity. This is the >same< network as everything else you have defined. If your networking outside the Netapp is correct then you works be able to ping any of the data lifs.

#

For kicks, take the svmfiler LIF. Are you able to ping it from node-01_mgmt1? What if you migrate it to each of the other ports node-01/02 ports e0c/d? Are you able to ping when it is at any location?

#

Reviewing above, where are your e0M connections? The picture you used above does not show the e0M connections to switches. It sounds like there is a connection issue between whatever switch is used for e0M and the data ports

tame marten
#

so from Ramsdens-01_mgmt1 I can ping both 172.16.10.180 and 172.16.10.182 and also reach the gateway and dns server and same with Ramsdens-02_mgmt

#

I cant ping svmfiler Lif from the any of the managment IP's or the cluster IP

#

e0M on both nodes are connected to a data switch on the network

#

e0a and e0b on both nodes are connected with each other

#

e0M is not in the same switch as e0c and e0d. However the switches that e0c and e0d are on are also connected to the same network that the other switch is on

obtuse fable
#

Yeah. So that data switch with the e0M connections is not communicating with the data switches with the e0c/e0d ports

#

Switch to switch problem.

tame marten
#

not directly, but they are both on the same network

obtuse fable
#

We can make your data ports work locally but there is an issue going through the other switch

#

Until the other switches can communicate with the switches pictured above and pass things correctly we will be running in circles

#

Are all these Netapp data lifs supposed to be on 172.16.10.0/23? Maybe the switches are blocking communication on that ip range?

tame marten
#

Just checked pinging from the switches that e0c and e0d on both nodes connected and it doesnt seem like its pinging anything at all, even though it has IP's configured manually

#

so this maybe a starting point in which case, I need to re look at the switch config

obtuse fable
#

Yes. If your network is that flat, it should just pass unless your switches (e0c/e0d) or the other switches (e0M) are misconfigured to talk and pass data

#

Once you get that fixed, redo the broadcast domain repair above and all the ports should end up in the same broadcast domain

tame marten
#

switch that e0m is just a normal unmanaged switch connected to the network, switch that e0c and e0d are connected to is managed so possibly this is where I'm going wrong

lime sun
lime sun
# tame marten Name Domain Name MTU Port List Status Details -------...
tame marten
obtuse fable
#

Can’t run data protocols over e0M. Pretty sure ontap prevents that

meager vector
meager vector
#

i mean thats just my guess,ports are probably just configured already on a different vlan it does seem foreign to me to have data network on same vlan/network whatever as cluster managemetn but everyone is different i suppose

dim roost
#

For simplicity and troubleshooting, I think flat is good.

#

Once we get this fixed, then we can look at getting more complicated.

meager vector
#

sure , has he show his switch config yet?

#

i scrolled up a bit

#

didnt see it

dim roost
#

No

#

I don't think he knows how.

#

And he's from UK, so makes it more complicated for me to troubleshoot.

#

If you know HP switches, feel free.

meager vector
#

ah okay yah its probably evening or something over there then right now

olive crane
#

does anyone know why we have to be a confirmed customer account to download the ontap select free evaluation now?

dim roost
#

@brazen jetty @uneven pulsar maybe you know someone who knows someone?

brazen jetty
#

🤷‍♂️ I'll ask around. If I had to guess, it's probably a "competitive" thing.

brazen jetty
#

The only minimum requirement was that you had a valid NetApp guest login, and not necessarily a validated customer. If that's changed, I'll see if I can find out why.

quaint ether
#

I think this question was asked on reddit a while back. and i'm 99.99999999% sure i recall the answer i went looking for was it's a competitive "thing"
That and we also have the test labs that are open to non-customers

nova vector
#

Hi - I currently have an A200 snapmirroring to a FAS2554 for DR. Both run 9.7P5. ActiveIQ is suggesting upgrading the A200 to 9.9.1P6 and the FAS2554 to 9.8P8. I had always thought it was best to keep both side on the same build. Is this not accurate? Also, I'm about to add an A400 to the mix which will also snapmirror to the FAS2554 if that makes a difference. I'm going to be replacing the FAS2554 with something newer later this calendar year. Thank you!

meager vector
#

snapmirror target doesnt "really" matter on revision

#

id personally keep the version sthe same on any in the same cluster

nova vector
#

okay cool. thank you.

meager vector
#

may or may not be best practice im just saying what i do

#

lol

#

I also don't upgrade unless theres a compelling reason to do so fwiw

nova vector
#

yeah I'm the same way. The A400 just came with a newer build preinstalled so I was going to bring everything up to at least that level

urban spear
#

Off the top of my head I think it might be that the 25XX platform doesn’t support 9.9.1 so you are being recommended the latest release that the hardware can take.

#

You can confirm in hardware universe, it will show you the supported versions for that platform. I just don’t have it open on my phone.

nova vector
#

yep you are correct. the 25XX doesn't support 9.9.1

meager vector
#

yah if thats the case i'd just not upgrade anything and keep everything at 9.7

#

i mean tbh i wouldnt upgrade past 9.7 unless you absolutely have to

nova vector
#

I certainly don't have to. The reason I was looking at it was that the A400 shipped with 9.9.1 something. So I suppose I could leave the A200 and FAS alone and leave the A400 9.9.1, move the A220 and A400 to the same build and leave the FAS alone/move it to 9.8, or move everything to the latest 9.8

urban spear
#

Mixed version SnapMirror is fine, unless you want to do SVM-DR. In that case you need to be within 2 versions.

#

There’s a great interoperability table on the docs site. Will see if I can find it. GUI quirks and that kind of stuff aside. There are a lot more reasons to upgrade to later releases than to stay on the older ones

#

In a lot of cases you’ll just get free performance upgrade as the software is improved etc

meager vector
urban spear
#

In the context of what he’s said he’s running, it’s a fair comment

meager vector
#

he didnt say what what kinda workload he was running

nova vector
urban spear
#

Yes that’s the one

#

Best advice, review the new features and improvements from 9.7-9.10 and decide what if any are applicable to your environment. Usually there will be something significant that will help pick a version.

brazen jetty
quaint ether
olive crane
tame marten
#

On going from my setup issue, It is infact the switches that's causing the dns issue. Switches was not actually connected to my network, it just had access for the configuration via the management port. Any way, I'm now trying to use another switch with couple of SFP ports which will be connected to my main network, anyone know if there are any specific requirements for C190 systems as so far I've tried 2 switches (circa 6-8 years old) and none seem to be bringing the port up on the Netapp

obtuse fable
#

Your best bet in this case are to use optical transceivers. They eliminate compatibility issues. I suspect whatever twinax cable you may be using is not compatible on one or both ends. You can use Cisco coded twinax on the Netapp and it generally (not always though) works with most switches. You may need to get approved Netapp optics and then supported optics for your switch and a few fibers to connect. I’ve also heard of companies creating special one way twinax cables where they code each end. I had a customer code one end Intel and the other Cisco and it worked like a champ

tame marten
dim roost
#

What is your network mainly using for switches?

tame marten
#

Usually HP switches

dim roost
#

Could you just put a domain controller on your test network for DNS?

#

And did you ever figure out if it is the switch causing the e0c/e0d port to not work?

tame marten
#

I think switch was the issue because, I could ping e0c and e0d on each node which was only connected to the switch. Switch had no route to my core network therefore it would not ping anything else

dim roost
#

Why not just hook to core network? You could put in a dedicated subnet/VLAN.

tame marten
#

and the switch that the C190 is connected to only has SFP ports and the test bench its not close to a switch thats on the core network to hook the HPE switches.

dim roost
#

Ok.

tame marten
#

which is why I ordered another small switch that has both ethernet and SFP ports

#

the 2 switches that has not network access is only for cluster for ISCSI

plush storm
#

What is actually the purpose for the C190? Will it host some of your critical workloads?

#

If yes I wouldn't cheap out on the front-end switches connecting the AFF to your hosts

crystal coyote
#

Thank you for releasing ONTAP9.10.1 GA

tame marten
rapid tartan
#

This might be bit of a vague question but how does ontap licensing work with the hardware purchase nowadays? Is there a way you can choose not to pay for some of the features (certain data protocol,snapmirror,snapshots...) or is it just all included. Thanks!

plush storm
#

Some licenses are always included (like most data protocols). Earlier they were included in what was called the Base Bundle, now it's the Core Bundle. Its value has even increased since some licenses (like Flexclone and Snaprestore) have been moved to the Core Bundle from higher Bundles.

#

There is no more Premium/Flash Bundle but the higher bundles have been split into smaller ones with more descriptive names like Data Protection Bundle, Hybrid Cloud Bundle, Anti-Ransomware Bundle, etc

meager vector
#

most of hte time not worth the effort

quaint ether
#

the only thing i've quoted serpratly for licensing has been Snaplock, but OG1 is correct, we just went through an "overhaul" of how things are bundled etc. best to chat with your account team on the details.

#

All the protocols have always been bundled together as far back as i can remember and are still currently.

meager vector
#

ive purchased flexclone as a stand alone license before but that was kinda a unique use case

quaint ether
#

yeah I can see that.

plush storm
#

we actually had one customer switch to the - back then relatively new - A400 with the Core bundle because they needed FlexClone and with the A300 you would need to get the Premium/Flash bundle and there was no need for all the SM/SC stuff inside

rapid tartan
#

Thank you all!

#

I know it's not a official netapp product but was anyone able to update Nabox 2.6.4 to 3.0 ? Web upgrade keeps failing for me with array[0] file not found error.

obtuse fable
#

I don’t see it there now. There used to be a note that due to significant structure changes it is not possible to upgrade to 3. You need to start over again. It was not even possible to import data from 2.x.

#

I do not know if that has changed since 3 became stable but I would doubt it. You may want to start over. The upgrade file is there to likely upgrade the beta to to stable

tough rain
#

I can confirm that. They changed their database in the background if I remember correctly. Mo migration and no export/import.
As you loose all historical data we will have both appliances running as long as we need the historical data or export some of them in a manual way.

gusty ocean
#

i need help with my storage management like i can someone help me remove apps i dont need

#

i have 6 GB of storage left

brazen jetty
#

Storage management on what, exactly?

gusty ocean
brazen jetty
#

Take a look at this article and see if that helps

tame marten
# tame marten Its for 2 purposes, 1: for fileshare for my company, which will have nothing to ...

From my previous conversation, I am trying to enable SMB for fileshare but getting the following error: "The Active Directory machine account was not created for the following reason: SecD error: no server is available."
I have configured DNS already and the node lif can ping the dns IP's. I have also tried creating an A Record on my DNS server but to no avail. Has anyone seen this before?

obtuse fable
#

Open a case. Support will help

tame marten
#

ok no worries

dim roost
#

@tame marten Did you get a case opened ok?

tame marten
dim roost
#

Ok.

#

God.

ashen mural
#

i need 8.3.1 software for fas2040 how can i find it

dim roost
#

8.3.1?

#

On 2040?

#

Nope, not gonna happen.

#

You mean 7.3.1?

meager vector
#

oh didnt read 2040

#

lol

ashen mural
#

Unauthorized Access to Me! says

quaint ether
#

you need a valid support contract to download software.

#

but a 2040 won't run 8.3

pearl nacelle
#

A question about switch from NVE to NAE. When we have all volumes in an aggregate still with volume encryption and want so switch to aggregate encryption we can issue the vol move command with "-encrypt with aggr-key true" within the aggregate. How long does this take depending on the Volume size. Is this a complete vol move like transfering it from one aggregate to another or is this only "internal" and takes only a few seconds/minutes

dim roost
pearl nacelle
#

thanks Paul

dim roost
#

I've never done it, so there is the possibility I could be wrong.

#

But I'd imagine it would have to crawl file system.

pearl nacelle
#

no you are not, we've tried it in the meantime and it's like a vol move from A to B

dim roost
#

Ok good.

tame marten
#

Trying to create a Volume for Fileshare but I cant have it to the correct size I require. whole system contains 12.1TB and then that's split into 2 aggregates, leaving 6.06TB on each aggregate. I want the Volume to be 8TB. Is there anything I can do to get it they way I want?

dim roost
#

NAS or SAN?

tame marten
#

NAS

dim roost
#

Assuming NAS, just create a FlexGroup across both nodes.

#

Oh...it's you again lol sorry didn't realize.

#

Did you get networking figured out?

#

And CIFS set up?

tame marten
#

Just to confirm Flexgroups can only be done for NAS and not SAN?

quaint ether
#

yes.

dim roost
#

Right.

tame marten
dim roost
#

If you want to do something similar with SAN, create multiple LUNS then in the guest OS set up a volume group (Linux) or spanned volume (Disk Manager in Windows).

tame marten
#

So I got the DNS configured, SMB enabled, Created a Volume and Share and tried to access via explore but no luck, permissions are set to everyone

quaint ether
#

joined to a domain?

tame marten
#

yes

dim roost
#

Eww CIFS permissions.

quaint ether
#

are you comfy with the CLI?

tame marten
tame marten
dim roost
#

Maybe trigger a fresh ASUP?

#

::> autosupport invoke -node * -type all

tame marten
quaint ether
#

vserver cifs check -vserver <vserver>

tame marten
#

hmmmm

#

SecD Error: no Conenction avail

dim roost
#

Is your AD domain controller on the same /23 subnet as before?

tame marten
#

it is

dim roost
#

If it's on the corporate network, then it won't work.

#

Hmm.

#

Can you ping from the data lifs?

tame marten
#

Only thing I havent done is the PTR record

#

I can ping both datalifs locally from my laptop

quaint ether
#

see if the data lifs can ping the DC.

#

do you see the vserver object in AD?

dim roost
#

ping -lif <lifname> -vserver <svmname> a.b.c.d

tame marten
#

I can ping DC with both lifs yes

tame marten
quaint ether
#

yeah.

#

also make sure it's in an OU without any policies applied.

tame marten
#

cifs-server... should this be the \filepath I will be using or the netbios name?

dim roost
#

TBH I really don't know.

quaint ether
#

\server\path

#

\\

#

\\1.1.1.1\path

dim roost
#

CIFS permissions are a bit outside of my skillset. I just don't have enough experience to effectively answer every question.

quaint ether
#

i'll fill in Mr NFS perf

#

when needed

dim roost
#

😄

#

Doesn't mean I'm completely ignorant either. lol

tame marten
#

So...vserver cifs create -vserver Filernew -cifs-server Filernew -domain mydomain.co.uk
should mean \ipaddress\Filernew?

quaint ether
#

the gui is oddly easier to join the domain

tame marten
#

\ipaddress\filernew

#

why does it remove one of the backslashes lol

quaint ether
#

it's a discord thing to invoke other stuffs.

#

do 3

#

\\ip\path\to

tame marten
#

ok so from above command my filepath will be \ip address\Filernew?

#

\\ip address\Filernew*

quaint ether
#

the IP address or host name is the name or the data lif of the vserver.

#

so it's really \\vserverwhateverDNSname\share\path to files

#

just to clarify that

#

remind me.. what ONTAP version? 9.9.1?

tame marten
#

9.8P3

quaint ether
#

lets look at the gui.

#

if you go here. What's SMB/CIFS show

#

wider crop:

tame marten
urban spear
#

I'm not sure - is a valid character in that name

tame marten
#

I just created it by accident

#

gona delete it

quaint ether
#

yeah the - is odd there.

tame marten
#

right the - is gone

#

Ive done vserver cifs check -vserver Filernew
and now its showing as up

quaint ether
#

also odd that the AD object is missing, i would try and rejoin it.

#

ah cook

#

cool

tame marten
#

its now in AD

quaint ether
#

can you browse?

#

the share

tame marten
#

should I not create share first?

#

?

quaint ether
#

oh, thought it was.

#

sure.

tame marten
#

well the Volume is created, Ive mapped the share to that vol

dim roost
#

One thing I do know: I think it has to be mounted in ONTAP as well.

quaint ether
#

the gui should auto create the junciton path when the volume is created

#

cli no

tame marten
#

Thats correct, I will delete it and try again

quaint ether
#

if you drop the volume, it'll show you some info.

tame marten
#

Mine looks all similar

#

gona test access now

#

surely shouldnt take this long? Im trying both Lifs too

quaint ether
#

should be pretty quick

#

you trying via IP?

tame marten
#

Although mine does show NFS as enabled

quaint ether
#

shouldn't matter I just have mine separated

tame marten
#

Even though its disabled

#

I am trying with IP

quaint ether
#

and you can ping.. \

tame marten
#

locally yes

quaint ether
#

what if you just browse to the server \\server ip \

tame marten
#

you mean to my DC?

quaint ether
#

from your desktop to the data lif on the netapp

tame marten
#

thats what I am trying, I have 2 datalifs, trying to access \172.16.10.183\Filernew

#

\*

#

-\

#

you know what I mean lol

quaint ether
#

is filernew your share name?

tame marten
#

yes also the cifserver name

dim roost
#

Can you even get to \\172.16.10.183 without a share?

tame marten
#

no just keep loading now

quaint ether
#

and let it error out.

#

chance are it's a time out, not an auth error

tame marten
#

ok lets see how it goes

#

I think I got an auth error before

quaint ether
#

auth is usually pretty quick. which makes sense when cifs check was getting the sec errors

tame marten
quaint ether
#

but you can ping it from the same box.

tame marten
#

I can

#

and I can ping from the lifs to anywhere on the netwokr

quaint ether
#

in the CLI does vserver cifs show look like this:

tame marten
#

yes but the server name is just Filernew

#

need to pick this back up in the morning as its end of the day here now 😦

quaint ether
#

np. kick off an asup. i'll look through it

#

I think paul knows your serial #. i can get it from him.

dim roost
#

Search SmSo for cluster name

#

Randems right?

#

Ramsdens*

quaint ether
#

10-4. got it

tame marten
#

looks like above didnt work

quaint ether
#

i saw it. didn't create a case, I wanted to review the ems log.
but i noticed that there was a log of this message "secd.cifsAuth.problem:debug".

#

the last one was maybe 20-25 minutes before your manual asup triggered.

tame marten
#

new different issue now... I can access "\172.16.10.183\Filernew

#

but only on servers that I login with my ad credentials

quaint ether
#

sounds like there are some AD gremlins.

#

"event log show" will show you the errors

tame marten
#

should it be NTLMv2?

quaint ether
#

if memory serves me, isn't that for local auth?

#

let me check docs after this zoom i'm on

tame marten
#

and im not sure why its using \Ashen Perera, its suppose to be \ashen.perera

quaint ether
#

something sounds goofy with the AD auth/hand off for sure.

tame marten
#

Ramsdens::> event log show
Time Node Severity Event


1/28/2022 14:09:39 Ramsdens-01 ERROR secd.cifsAuth.problem: vserver (Filernew) General CIFS authentication problem. E rror: User authentication procedure failed
CIFS SMB2 Share mapping - Client Ip = 172.16.11.15
[ 0 ms] Login attempt by domain user '.\Ashen Perera' using NTLMv2 style security
[ 0] Using a cached connection to "mydomain.co.uk"
[ 3] Authentication failed with DC ADDR. Not retriable. (Status: 0xc0000064)
[ 4] Login attempt by local user '.\Ashen Perera' using NTLMv2 style security
[ 4] User is not known
[ 6] Using a cached connection to "mydomain.co.uk"
[ 12] Unable to find the NetBIOS domain name for Active Directory '.'
**[ 12] FAILURE: CIFS authentication failed
[ 16] Using a cached connection to "mydomain.co.uk"
[ 23] Unable to find the NetBIOS domain name for Active Directory '.'

#

thats the full error

tame marten
#

just a thought... do I need ldap configured?

quaint ether
#

is it configured in your environment overall?

tame marten
#

all our AD servers are ldap servers

quaint ether
#

i would configure it and see

tame marten
#

right will give it ago now

#

keep getting this error when trying to complete the DN

Base DN specified in the LDAP client configuration is not available for the following reason: LDAP Error: The distinguished name has an invalid syntax.

#

?

quaint ether
#

that looks right.

tame marten
#

also should both svm ldap and global ldap configuration should have the same -client-config name?

quaint ether
#

i'd just keep it to the SVM.

tame marten
#

ok will delete and start again

quaint ether
tame marten
#

that is what I followed but it seemed to have created 2

#

one for the Filernew SVM and one for the Global

quaint ether
#

hurm.. been a while since I ran though that setup. maybe i'm forgetting something?
any errors though ?

tame marten
#

just a warning

#

Warning: "LDAP" is not present as a name service source in any of the name service databases, however, a valid LDAP configuration was found for Vserver "Filernew". Either configure "LDAP" as a name service source using the "vserver
services name-service ns-switch" command or remove the "LDAP" configuration from the Vserver "Filernew" using the "vserver services name-service ldap delete" command.

#

should the passwd database be ldap instead of files?

quaint ether
#

i have never changed those... um... do you happen to have a support case open on this yet?

tame marten
#

Yes I do, the person dealing with it is off untill Monday however

quaint ether
#

you can request a new case owner.

#

unless you want to wait for that person.

tame marten
#

its almost the end of the day now and nothing will be done over the weekend, so I might aswell wait untill Monday

#

I will just keep playing with it

tame marten
#

damit you cant have the same ldap on your svm as your admin svm

true finch
crystal coyote
#

Good morning, I tried to download the ONTAP simulator from the NetApp support site, but the page disappeared. Does anyone know where I can find it?

crystal coyote
crystal coyote
#

I just checked and the ONTAP simulator page now appears, probably because it has been updated with the addition of ONTAP 9.10.1.

quasi harbor
#

Hello everyone,
Is there any way to learn or reset manufacture mode password for sldiag mfg command?
I have an error like below;
"SLDIAG: Only authorized personnel can use this command in normal boot mode."

tame marten
#

Following on from my issues with setting SMB for fileshare, can anyone explain or assist on why I can browse a SVM Share from windows explore but cannot map as a network drive as getting an error stating "the network name cannot be found"

dim roost
#

NAS L2 Support.

#

:\

#

Get a packet trace and see what it is attempting to map.

tame marten
#

it seems to work ok on a device that has no credentials added

plush storm
weak spoke
#

manufacturing mode is only for manufacturing 🙂

quasi harbor
weak spoke
#

Unfortunately we can’t assist with that. There is not a way to set or reset the SLDIAG password

weak spoke
#

(I of course mean manufacturing mode password, not SLDIAG one, but the result is the same. It's not a password which can be set or reset)

worldly meadow
#

Hello all

#

Anyone here using Unraid in there Netapp Case?

quaint ether
#

like a home lab hack-job?

worldly meadow
#

I guess you can say that

#

Are there any specific cases that would work well with the unraid setup?

#

Basically just wanting a case that can hold several 3.5 SATA HD's and also be able to have a Decent MOBO and Processor for Docker containers and VM's....It would also be ideal for this case to be rack mountable

quaint ether
#

NetApp shelves are JBODs. there are people that buy old ones off ebay and hack into their home lab.
Nothing i'd recommend for anything production.

worldly meadow
#

Thanks for the info, I know Unraid takes care of the Raiding process based on the amount of chosen Parity/Cache Drives ETC, however as mentioned this will be primarily be a home lab server for tinkering with Different Apps, VM's and Docker Containers....As of now I have a measly Medium Sized ATX cases with a 10TB and 3TB Hard Drive running unraid which I recently setup however the reason for my question is based on how I would go about expanding into a more suitable case and more Drives and also a much better Processor (12 Cores) and a lot of RAM 🙂 ... I recently came across some Chassis which caught my eye which is more so what I am looking for instead of the NetApp Config...https://thesysadminchannel.com/best-homelab-server-2020/

The best homelab server you should be looking at in 2020.

#

One of those babies should do just Fine...

true finch
#

@worldly meadow Personally, I would find a cheap controller pair to hook the shelves to rather than trying to hack together the right HBAs and disk fw to make it usable in JBOD mode. You'll have a much, much better experience.

#

One thing to note, I believe the fans in the shelves just spin at 100% when ONTAP (our OS) isn't there in an attached controller to ramp up/down.

meager vector
#

I'm definiteily a yuge fan of ZFS for my lab and while im not sure if its still applciable to the later versions of the simular older ontap sims you could remove the size limitaions and that made labs a lot more "authentic" to what we run in production

#

*lets ignore how much i butchered spelling

sonic moat
#

In f8040-26-33 is showing connected to port number 46 con12d20 in snolw ls but con12d20 not showing in port number 46 in anyone is not connected

true finch
#

Hey Hari, did you need help with something?

meager finch
#

Hi @here
Hope you are doing well!
Actually I am facing an issue with Netapp SDK while collecting the Lun's performance data. I am getting the below error
ta_ontap.OntapClient.ClientSideError: [OntapClient] Client Side Code Error 13001: Aggregated instances requested for the lun object exceeds the data capacity of the performance subsystem, because it includes 7928 constituent instances. With the current counter set, use the -node, -vserver, or -filter flags to include at most 2612 constituent instances in order to stay within the data capacity. Alternatively, requesting fewer counters will also reduce the required data and may allow more instances to be requested.

Can you please guide me to solve this issue. Is there any way to decrease the constituents instances or any other approach .
PS : I am using the splunk plugin (Splunk addon for Netapp ONTAP).
Thanks!

meager finch
worldly meadow
cosmic cave
#

I ended up building a whitebox HA pair with OTS on a couple super micro boxes. not the cheapest option by far, but fully functional, and quiet enough to keep running under my desk. I still use the sims a lot, but mostly in nested lab environments. The PPD is getting ready to block us from running them on our laptops so I'll probably end up carrying a miniature version on NUCs if travel ever becomes a thing again.

clever rose
#

Hello community hope you are doing well, I would like to upgrade the Santricity OS from 8.20 to 8.40 but my Santricity Manager is on 11.42, is this a problem? Do I need to upgrade the manager to 11.53 first? Thanks in advance and best regards

peak cedar
#

Hello, working on sending our config backups to a remote site. I wanted to check if it supports sftp as a destination. I know the KB doesn't say so but wanted to just cover all resources.

quaint ether
quaint ether
peak cedar
#

@quaint ether thanks for trying. I figured that was the case since it wasn't in the documentation but figured I would ask.

snow lily
#

Question around NFS sharing on a volume with NTFS permissions. Currently, if I have 1 Linux user on a linux server mount a volume with NTFS permissions as NFS, I create a unix to windows user mapping in ONTAP for that Linux server to the Windows user that has permissions to the share. If I have 2 or more Linux users that need to access the same NFS mounted share, is it as simple as adding those additional unix to windows user mappings as the concept of a unix group permission doesn't seem to apply when using NTFS permissions for the volume? I tested it that way and was able to access on the Linux server with all the users I created the user mapping for but wanted to confirm that was the correct route.

clever river
#

Hey everyone I am looking to upgrade my VMware environment to 7.0U3. I'm currently running Ontap 9.7P11 on a FAS2650. I'm having a hell of a time getting the IMT to play nice to tell me if it's supported or not. What am I doing wrong in the IMT? I click next and it never does anything. Any tips? Thanks!

dim roost
plush storm
dim roost
plush storm
#

But the main question here is: What kind of datastores are you trying to use / are you using?

#

NFS datastore or VMFS datastores?

#

There is no general interoperability between ONTAP and vSphere, it's more about solutions and if you want to add NetApp plug-ins to the vCenter Server.

#

As a first general step go to this tiny miny link on the lower left of your screen

#

and use "Solution Search"

#

everything else sucks, trust me

#

Then: If you want to use NFS datastores, you are mostly good to go, with NFSv3 there is not too much to consider. If you want to use NFSv4.1 check the "NFS v4.1 Interoperability" solution because you will need to make sure your ESXi version is not too old, because there have been bugs, major ones, with older versions.

#

Also use the "NetApp NFS Plug-in for VMware VAAI" solution if you want to know which version of NFS VAAI plug-in you can use with which ONTAP version and ESXi version... there is no 100% need to use NFS VAAI (to offload some stuff to ONTAP) but if you decide to use it, make sure you have the correct version. Otherwise... things can happen.

#

If you plan to use VMFS datastore there is much more to consider: Use the "ONTAP SAN Host" solution and FILL OUT ALL THE STUFF.... yes, there is much.... what hba, hba driver, hba firmware, etc.

#

The last thing which is relevant in regard to compatibility between ONTAP and vSphere is if you are using some kind of plug-in, like "ONTAP Tools for VMware vSphere" (the old VSC), "SnapCenter Plug-in for VMware vSphere", etc.

#

that's basically it

#

also "Active IQ Unified Manager" can interact with vCenter so if you're using that (and I can highly recommend) it's also a good idea to check that solution

#

Concluding: If you still have issues with the site, I would suggest to use private mode on your browser. Yes, you will need to type in that OTP again, but there have been sooooo many issues with some old cookies on NetApp sites I can't even keep count

#

I really really hope IMT is also one of the tools which gets rewritten from scratch 😕

dim roost
#

@plush storm @clever river Drew Claybrook is off today, but he has some contacts who can maybe forward on the feedback.

#

If you want to send it to me, my e-mail is first dot last at the company we work for dot com

#

(obfuscating because of spammers on a public forum)

plush storm
#

If this feedback is not already known, everything is lost

dim roost
#

It probably is, but the more voices who give feedback give more attention to the issue.

plush storm
#

basically the top one... for years

dim roost
#

Ah.

clever river
#

@plush storm We are using NFS v3 on one stack but NFS v.4 on another stack. No VMFS. Just need to verify these two

plush storm
#

Am I seeing this correctly... the "old" version 9.8 of ONTAP Tools now has ESXi 7.0U3 support, but the new version 9.10 does not? 🤨

dim roost
#

I'd e-mail IMT team and ask @plush storm

plush storm
#

done

brazen jetty
#

As of a few hours ago, ONTAP 9.10.1P1 has been posted to the NetApp Support Site

meager vector
#

did they rename tiers back to aggregates? did they enable thin provisionining at the time of volume creation in system manager? Did they change "overview" to useful information or is it still links to other part of system manager" did they add BACK the ability to create a snapvault relationship from system manager? for 9.10

quaint ether
#

i need to go look at the GUI in 9.10.1. I actually haven't yet 🙂

meager vector
#

i gave up when 9.9 was just 9.8 with some slight modifications i am not hopeful. 😦

#

9.8+ is just OnTap as envisioned by marketing and morons

quaint ether
#

They do keep adding things back in based on feed back from the field.

meager vector
#

heres to hoping.

#

completely off topic. im trying to convert an existing volume to encrypted using vol encryption conversion start etc etc when i go to specificy the volume "-volume" every volume I have shows up except the one I want to convert.. its subsequently the newest volume. any ideas?

#

nope i should work in marketing. i already encrypted it so it doesnt show up

#

lol

quaint ether
#

lol

#

'i was checking to see if i could find a list of reasons of why something isn't able to encrypt

#

if you forced the name, it might error saying that.

#

haven't tried

true finch
meager vector
#

lol very much an ID10T error

obtuse fable
#

As of ontap 9.9.1 ( and maybe even some patch releases of 9.8), create a volume in the GUI. Modify options, select the pull down for performance. Select the custom. Boom. The aggregate list fills in

strong horizon
#

Hey friends! I'm running ONTAP 9.5 in an on-prem deployment. I'm trying to delete a vserver that has an orphaned CIFS server attached to it. I need to delete it (and the vserver), but the domain in question Is No More.

There are several articles out there about how to force a CIFS server deletion, but I'm not really getting anywhere with them. Details follow.

cosmic cave
#

thats sounding like an smdb table problem. if you're headed toward a decom then I'd suggest just deleting all the vols and stopping the svm. later when decom time arrives 4a the whole system. scorched earth, no more svm.

strong horizon
quaint ether
#

i've heard of 4 and 9a/b. but each is a wipe

#

at the boot menu

strong horizon
#

gotcha. I think between destroying the aggregates, doing the disk sanitization procedure, resetting the encryption on the SEDs, AND doing a boot loader wipe I should be able to generate enough artifacts to say "yep, all data gone"

true finch
#

Isnt there a "secure erase" procedure in the boot menu as well? We used to have something like that. I know because I had to use it once about 10 years ago. Might have been a 7-mode thing

quaint ether
#

there is

urban spear
#

Yes disk sanitisation in maint mode

quaint ether
#

There's also secure purge

#

but. on a volume

#

the only thing it can't do is give an official certificate. even we use a 3rd party for that

strong horizon
#

oh wow, that article looks like exactly what I need. I might have to upgrade to 9.6 or something just to do this (assuming it won't work in 9.5)

#

One of the two filers I need to decommission just alerted for a failed hard drive, one I won't be able to get replaced (but I also don't care). Is a single failed disk going to stop me from doing any of these procedures, do you think?

quaint ether
#

shouldn't, but you could just yank it out too

strong horizon
#

true. I'll have to get onsite hands to do just that. (of course the filer that dropped a hard drive is the one that's remote)

#

Thanks Mike, appreciate you finding that article. Any reason to believe the procedure wouldn't work on 9.5?

quaint ether
#

nope.

#

you don't have SEDs correct?

strong horizon
#

Some SEDs. I know there's a different procedure for that.

#

Looks simple enough. Destructive things usually are

quaint ether
#

this system has to be returned? or would just a hammer work?

strong horizon
#

(Last time I decommed a filer with all flash SEDs I forgot to do that part and disconnected the KeySecure too early. I had to do a LOT of shenanigans from the boot loader to get those drives wiped correctly while also generating artifacts showing same.)

#

I'm honestly not sure what's going to happen to these filers, but I know I need to generate artifacts demonstrating Really Truly No Data, Honest. While I'd love to take it out to the range with the boys I don't think that's gonna satisfy my stakeholders

quaint ether
#

got ya. go with the wipe.

cosmic cave
quaint ether
#

a long time ago in a galaxy far far away.

true finch
#

In the Before time…

coral cargo
#

Good morning, does anyone of you know how to open the NetApp Fas2040 interface

coral cargo
#

and how can i read out my key

#

hmmm error

weak spoke
#

hi there @coral cargo - two questions there. second one is easiest - you don't need that command on a FAS2040. It relates to hardware encrypted drives and there are no hardware encrypted drives for a FAS2040, so unless you have no internal drives, and only encrypted ones in an external shelf, I don't believe you need that

#

first question - each controller has a serial interface you can login to, which gives you access to the CLI. You can also access the CLI by SSH or telnet (unless turned off, which it should be) to either the BMC management IP or any of the IP addresses that serve data

#

there is also a GUI for management called OnCommand System Manager, which is a java and flash applet, and difficult to run on modern hardware

clear tide
#

Hi, Hope all is fine! Just want to ask a question. We currently have AFF A250 with 14 disk inside and running only 1 AGGR in production. If we add another 10 disk to utilize all the bays, will it be partitioned by the system or we need to do it manually. TIA for all the answers.

plush storm
#

I'm not entirely sure when and how ONTAP decides to auto-partition or not. But anyways. You would want to also partition the new 10 disks so you can add them to the existing aggr. That way you only lose two disks for parity information. If you create another aggr or even another raid-group inside the existing aggr you will have four parity disks in total (assuming you are using raid-dp).

#

What's the size of the SSDs?

#

It could maybe make sense to create another aggr for the second node so you can utilize both nodes. But that mosty depends on the layout of your current aggr. Did you use both partitions?

clear tide
#

SSD Size: 1.92TB,SED,NVMe,25GbE,Core,NVE

#

When when we created the aggregates, we just click the recommendation and it created automatically and says its the best practice.

#

When I checked, It has given us aggr at node 2 with 8.42TB only.

clear tide
#

also, when I command sysconfig -r in the system on both nodes, it says that it has aggr in both node but when I type aggr show, it only show the aggr in node 2..

plush storm
#

Can you post the output of "run -node * sysconfig -r" and "aggr show"? Write these cmds in the clustershell not in the nodeshell. I guess you are mixing up root aggrs and data aggrs.

clear tide
#

Hi, kindly see attached txt file.

#

just to inform you, there are two NetApp devices clustered in there. the other one is FAS8200.

plush storm
#

The aggr-design of your AFF A250 is correct and as I imagined what ONTAP would do for it's recommendation.
You definitely have two aggrs on your A250: AFFA250_01_NVME_SSD_1 and AFFA250_02_NVME_SSD_1.
Each one is only using P1 or P2 partitions so everything good so far.

If you would add 10x more SSDs you could easily increase the size of your existing aggrs. ONTAP should automatically partition the disks and then add the partitions to the existing raid-group. It might also try to create a new raid-group inside your existing aggrs, so you possibly have to increase the maxraidsize value. If you have a valid support contract I would not suggest to create new raid-groups but to fill up the existing ones (so set the maxraidsize to 23).
Otherwise you will lose too much space. (The recommended raid-group size for SSDs with RAID_DP is between 20 and 28.)

What is weird though is that aggr AFFA250_01_NVME_SSD_1 from node AFFA250-01 is not shown in your "aggr show" command.

Please provide the output of the following commands:

set diag
version -node *
system image show
cluster show
node show
cluster ring show
debug vreport show -instance
system node run -node AFFA250-0* sysconfig -a
aggr show -aggregate AFFA250_01_NVME_SSD_1 -instance
aggr show -aggregate AFFA250_02_NVME_SSD_1 -instance
set admin
#

oh while we're at it, also this (I can't see the ASUPs of this cluster but the NetApp guys can):

autosupport invoke -node * -type all
quaint ether
#

I can check later, just need a cluster name. feel free to DM if needed.

weak spoke
#

@loud musk I understand you're interested in a storagegrid lab? Do you work for one of our partners, or are you a customer, or just interested?

clear tide
#

done triggering autosupport also. Thanks for the help NetApp Community Team.

plush storm
#

There is an inconsistency between VLDB and WAFL:

FAS8200Cluster01::*> a debug vreport show -instance

                     Object type: aggregate
                          Object: AFFA250_01_NVME_SSD_1(b78ec714-6ad6-476b-acd6-93672720b9f8)
              List of attributes: Node Name: AFFA250-01
                                  Aggregate UUID: b78ec714-6ad6-476b-acd6-93672720b9f8
                                  Aggregate State: online
                                  Aggregate Raid Status: raid_dp
                                  Aggregate HA Policy: sfo
                                  Is Aggregate Root: false
                                  Is Composite Aggregate: false
           Reason for difference: Present in WAFL Only
         Duplicate Object Values: -
Attributes With Differing Values: -
                  Values In WAFL: -
                  Values In VLDB: -
                 Recommended Fix: -

Please create a NetApp case to fix this. I can't really recommend anything else. There are ways but you really shouldn't try to fix this on your own, especially if it's a production system.

#

I'm not sure how you managed to get in this situation, this does not happen often.
I can see you updated your cluster to ONTAP 9.9.1P6 on 2/12/2022. But the older image is not on the same ONTAP-version for all the nodes. So I guess you added some nodes to the cluster after that date?

clear tide
#

okay. thanks guys for the help. Actually I already reported this to our local vendor but they are not yet replying to my email yet.

#

regarding the updating of the systems, we had a series of Ontap upgrade last February with our systems since we are planning to cluster all NetApp devices. right now FAS 8200 and AFF 250 is joined already and the other devices are still for upgrade and later will also join the cluster.

plush storm
#

My guess would be you added the new AFF A250 nodes to the existing FAS8200 cluster but did not completely destroy the old aggrs from the SSDs of the A250.

#

Anyways, ask your vendor for a NetApp-case you shouldn't fix this on your own.

clear tide
#

hmmm.. I remember my colleague configuring the AFF A250 system an HA and created an aggregate because he did not know that we will join it to cluster.

#

but I also ask him to re initialized the disk after that.

#

anyway, we'll have a remote session with NetApp support team possibly this coming week and let's see what they can find. I will try to keep you posted. thanks again @plush storm! NetApp#1!!!

plush storm
#

This is also weird:

slot 0: 25G Ethernet Controller CX5
e0c MAC Address:    d0:39:ea:4a:ae:7e (auto-10g_cr-fd-up)
    SFP Vendor:         Amphenol
    SFP Part Number:    NDCCGF-N102
    SFP Serial Number:  APF21289413922
e0d MAC Address:    d0:39:ea:4a:ae:7f (auto-25g_cr-fd-up)
    SFP Vendor:         Amphenol
    SFP Part Number:    NDCCGF-N102
    SFP Serial Number:  APF21289413994
Device Type:        CX5 PSID(NAP0000000015)
Firmware Version:   16.26.4012

All the links for your cluster interconnect should be 25Gb since 10Gb is not supported on AFF A250. You should have both links up with 25Gb especially because the HA traffic is also going over these ports.

#

Also make sure you're using the correct RCFs files on your cluster interconnect switches

clear tide
clear tide
mental otter
#

Hi, I have a question related to GCP

#

On GCP I subscribed to Netapp Cloud Volume with a billing account 1 and created some volumes. Now I changed that billing account to a reseller, which cannot subscribe to Netapp Cloud Volume anymore

#

How can I view my created volumes?

covert wyvern
#

Hi everyone ! Anybody know how i can license key from netapp support site at these hardest nowadays due russia-ukrain crisis? May be someone can help me to got license key ?

brazen jetty
#

Hi @covert wyvern, Is there a specific error message you're seeing? Do you mind letting me know what region/area/country you're in so we can try to ensure responses are accurate?

covert wyvern
weak spoke
#

hi @covert wyvern you would need to talk to the reseller about that. I assume you have bought this system brand new and not on the secondhand market?

covert wyvern
weak spoke
#

Unfortunately I am unable to assist further at this time. I suggest you remain in contact with your reseller and follow their advice

covert wyvern
heavy mirage
#

Hi...I am having trouble finding dowlnoad for system manager

#

netapp support site would not let me download

#

I received one FAS2240-2 box and I would try to test it in homelab

rotund hatch
#

Hi all! Technical question: I have 2x10GE ports per node available for data traffic. I'd like to combine SMB and iSCSI lifs over preferably an LACP channel using these two ports. Is this supported with iscsi mpio?

quaint ether
# rotund hatch Hi all! Technical question: I have 2x10GE ports per node available for data traf...

Yeah, you can see it's done here from the storage side in this flexpod CVD. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/UCS_CVDs/flexpod_esxi65u1_n9kiscsi.html#_Toc24993351

quaint ether
heavy mirage
quaint ether
#

what error do you get when you try and download it

heavy mirage
#

unauthorized download...and I get link to contact sales to buy support :)

quaint ether
#

doh

heavy mirage
#

Products

All Products

OnCommand System Manager (Downloads)

3.1.3

Unauthorized Access!

If you would like to purchase, please contact NetApp

#

few years ago I was managing some similar FAS and downloads were free even on my personal account not tied to client acc

weak spoke
#

Hi @heavy mirage, we can't comment what practices were in the past, but at this time all downloads require an account with a valid support contract (even though you can't get one for a FAS2240 now..).

obtuse fable
rotund hatch
#

Thanks guys, will use jumbo frames on ifgrp and then SMB mtu 1500 vlan next to iscsi mtu 9000 vlan on the ifgrp - that should work

stable remnant
#

General question. Is there a handle to ask questions about netapp ontap select software. We have been having significant issues with that solution.

weak spoke
meager finch
#

@here I am facing the below error
ta_ontap.OntapClient.ClientSideError: [OntapClient] Client Side Code Error 13001: Aggregated instances requested for the lun object exceeds the data capacity of the performance subsystem, because it includes 7928 constituent instances. With the current counter set, use the -node, -vserver, or -filter flags to include at most 2612 constituent instances in order to stay within the data capacity. Alternatively, requesting fewer counters will also reduce the required data and may allow more instances to be requested.
Any help will really be appreciated .
Thanks!

pearl nacelle
#

is there an option to delay a Metrocluster Update on a Site? So at the moment both sides are updating their nodes simultaneously. Can we force ONTAP to upgrade one site first an then the other?

pearl nacelle
#

thanks 😄

normal rover
#

Hi all, is 15 Seconds IO timeout for NFS okay? When you failover?

tough rain
#

Depends on your network but it seems quite long to me. Did you do an unplanned failover or anything planned? Metrocluster switchover or HA takeover?

normal rover
#

Happens on every lif migration.

urban spear
#

Seems long, have any arp timeout issue somewhere or an issue with arp updates/gARP acceptance?

#

Usually lif migration I expect 0-2 pings dropped

blissful sundial
#

So funny story (and why I'm not doing an upgrade today). The network team went through and ratcheted down some STIGs on our enclaves a few years ago, and everything was 'fine'. Our head guy has always said 'don't watch the toast toast' during a NetApp upgrade, and after having watched one of our old units too closely one time, I decided to just take his advice and not pay too much attention to the cluster while it did its thing.

Anyhow, some weeks or months go by after the network shop had done their thing, and I fire off an upgrade. Walked out of the office to hit the restroom, chatted with some folks down the hall, totally took my time knowing that these units were going to take about 25 minutes/node to complete. I badged back into the lab, and everyone was freaking out. Widespread burps and outages.

"Where were you?" Uhhh.... totally not watching the toast. Turns out the network team had disabled gratuitous ARP, and our LIF failovers, which usually drop 1-2 pings and move on like you said, were going down hard and wouldn't respond until the ARP cache expired. All of the VMware datastores are on the appliance, so when those NFS LIFs went, boooooooy did we notice. I don't know if disabling gratuitous ARP had become a new thing in the STIG at that point or if we had carried it as open without properly documenting our needs, but holy cow it made for a fun Friday. It's properly documented now. 🙂

quaint ether
#

oof...

normal rover
#

Performance Monitor on the impacted VM during IOMeter run with fixed IOPS.

#

the dip is the lif migration

#

ping -t during the time from the esx host which runs the VM to the NFS lif didn´t drop any packets

pastel hound
#

Hello! I want to get statistic information (Latency, IOPS and Throughput) in System Manager, by CLI.
I learned 'sysstat -x' in node shell would solve. But I am not sure how I can translate sysstat result into Latency/IOPS/Throughput. Any advise please?

kindred pier
pastel hound
#

It's 9.7

kindred pier
#

However, having said that, you may want to check out ActiveIQ Unified Manager, it's a separate tool for managing your ONTAP based systems and includes gathering and presenting performance information in nice graphs for you to view.

kindred pier
#

There are some cluster level CLI commands as well I believe, like "dashboard performance show", "cluster statistics show", and statistics show-periodic -interval 1

#

So hopefully that has given you enough info to move forward. 🙂

pastel hound
obtuse fable
tame marten
#

Hi All... I am trying to setup iSCSI on my netapp C190. I have created 4 lifs and a Vserver for iSCSI and added all 4 lifs for the vserver. These lifs then get connected to 2 switches, which then get connected to 2 HPE servers. I can ping all lifs from both servers but if I try to ping the servers from netapp, it seems not to be pinging. To get a better understanding:

#

I created a subnet with a range of 172.16.40.2-40.6 when I created the lifs

dim roost
#

Are you using 2 switches?

tame marten
#

I am

dim roost
#

Is the difference going across switches?

tame marten
#

So I didnt change any cables and it worked before

dim roost
#

Sounds like you didn't set up the intra-switch switching right.

tame marten
#

cant remember doing that previously

dim roost
#

True, but I remember you having some pinging problems before.

#

DId you wipe the switches?

tame marten
#

Thats right, I had this same issue and I manage to get it working after trying few things

#

Switches arent configured

dim roost
#

So go back through the few things you tried and try them again. 😄

tame marten
#

Lol only if I taken notes the first time 😂

#

I am taking notes this time though

dim roost
#

Didn't you talk about it here?

tame marten
#

I did

dim roost
#

Maybe it is in the chat history?

tame marten
#

I had a look, someone suggested check igroups

dim roost
#

I don't know HP switches at all so I have zero clue

true finch
#

Fully indexed and searchable, discord is!

quaint ether
#

anyone else read that in Yoda's voice, or just me.

tame marten
#

I've reset the switches, I dont understand why I can ping all 4 lifs from the servers but not the other way around 😦

dim roost
#

Go back through your old chats. I have no idea.

urban spear
#

A diagram may help. Like how is it all wired up?

dim roost
#

I think you or @quaint ether helped initially. 😄

quaint ether
#

can't ping from the storage side to the host side? and are you specifying the lif that the ping is going out of?

tame marten
#

storage side, I can ping from the host side

tame marten
#

Physically this is how it is:
Green ports (Nd1 e0c & Nd2 e0c) are the ones that are working fine
Red ports (Nd1 e0d & Nd2 e0d) doesnt seem to be making a connection in the iSCSI initiator
These ports go into 2 switches which are then connected to the HPE servers.

tough rain
quaint ether
#

I second that. ^

tough rain
#

When all IPs are in the same subnet how do you control which path is used? It is possible that the ping is received on one IP but the reply is send via the other IP and the route is known and will be used

quaint ether
#

i scrolled up. - based on the pings it looks like it's two different networks, but not.

tough rain
#

He mentioned a subnet for all storage IPs. With that, all traffic need to be routed via layer 3 and routes will be used

urban spear
#

Some old-ish diagrams but in general you want it like the guys have said above. Create effectively two fabrics.

#

Then you add the paths to your hosts and the hosts will handle MPIO

dim roost
#

And if it's in the same VLAN/subnet, it avoids any spanning tree or asynchronous routing issues.

#

And it's quicker since it only has to go to layer 2 but never layer 3, which takes less CPU and hops.

#

Less networking CPU

quaint ether
#

i swear we had an express guide for iscsi at one point for windows / esxi

urban spear
#

There might still be. The FlexPod guides cover it pretty well too, just ignore the fabric interconnect parts

quaint ether
#

the GUI is way the hell different, but concepts are more or less the same.

tame marten
#

I have setup VLANs at the switch level. I have set 3 VLANs. 1 for all iSCSI traffic, one for all other traffic and one for Switch cluster. As mentioned it worked before with the same config as, I've backed up the switch config and reset both switches and uploaded the config back

tough rain
#

Anyway: build a fabric. iSCSI needs to have 2 VLANs. If you don’t want to build it properly no one can help you, sorry

plush storm
#

Hi guys, is there interoperability between ONTAP version and ONTAP Mediator for Metrocluster IP?

#

So for example, if you're using ONTAP 9.10.1 in your Metro-IP you need update to Mediator 1.3, etc

#

I can't find anything in IMT, HWU, KB, Docs, etc

#

🤷‍♂️

quaint ether
#

I oddly can't either. i'm going to ask an MCC SA i know.

#

"All Mediator versions are supported on MetroCluster IP configurations running ONTAP 9.7 or later."

tame marten
quaint ether
#

there might be.

tame marten
#

I have added a gateway to the subnet I created for iSCSI, and I think it doesnt need a gateway, maybe this is where I went wrong

quaint ether
#

typically iscsi networks aren't route-able.

#

that maybe?

tame marten
#

I will remove everything to do with iSCSI and start from scratch, it may decide to work this tieme

#

any one know what security style is used for iSCSI: unix, ntfs, or mixed.

plush storm
#

we always use unix

#

but it should not really matter

#

with SAN SVMs

tame marten
plush storm
tame marten
#

Still no luck after reset, I must be missing something....😦 does interface groups have any relevance to iSCSI?

quaint ether
#

Nope - if they're healthy / up and configured correctly (switch side too)

tame marten
#

It must be a switch thing as I can ping all lifs from the host side, but not all host ports from the lifs

tough rain
#

@tame marten Please paste the output from „network interface show“ here

tame marten
#

iSCSI
iSCSILif1 up/up 172.16.40.2/24 RAMSDENS-01 e0c true
iSCSILif2 up/up 172.16.40.3/24 RAMSDENS-01 e0d true
iSCSILif3 up/up 172.16.40.4/24 RAMSDENS-02 e0c true
iSCSILif4 up/up 172.16.40.5/24 RAMSDENS-02 e0d true

#

RAMSDENS::> net port reachability show -port e0c
(network port reachability show)
Node Port Expected Reachability Reachability Status


RAMSDENS-01
e0c Default:iSCSI ok
RAMSDENS-02
e0c Default:iSCSI ok
2 entries were displayed.

RAMSDENS::> net port reachability show -port e0d
(network port reachability show)
Node Port Expected Reachability Reachability Status


RAMSDENS-01
e0d Default:iSCSI ok
RAMSDENS-02
e0d Default:iSCSI ok
2 entries were displayed.

#

RAMSDENS::> net port show
(network port show)

Node: RAMSDENS-01
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Management up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default iSCSI up 1500 auto/10000 healthy
e0d Default iSCSI up 1500 auto/10000 healthy
e0e Default Filer up 1500 auto/1000 healthy
e0f Default - down 1500 auto/- -

Node: RAMSDENS-02
Speed(Mbps) Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status


e0M Default Management up 1500 auto/1000 healthy
e0a Cluster Cluster up 9000 auto/10000 healthy
e0b Cluster Cluster up 9000 auto/10000 healthy
e0c Default iSCSI up 1500 auto/10000 healthy
e0d Default iSCSI up 1500 auto/10000 healthy
e0e Default Filer up 1500 auto/1000 healthy
e0f Default - down 1500 auto/- -

tough rain
#

So LIF 1+3 must be VLAN A and LIF 2+4 must be VLAN B

#

Build 2 different networks. Make sure that lif1 can’t reach lif2

#

Otherwise it won’t work

tame marten
tough rain
tame marten
plush storm
#

But your subnet ist 172.16.40.0/24 where all your LIFs are located, why not creating different subnets (maybe a little bit smaller than /24) for the different VLANs?

tame marten
bronze nova
#

anyone done a lot of LUN moves under 9.9.1 ? Any reason this would drop from 54% back to 25% ?

plush storm
dim roost
#

(run from diag)

bronze nova
#

there is not a lot in the logs.. i did see a lot of WAFL scans running so maybe either an Aggr or Vol scan happend ? its no big deal it finished eventually

dim roost
#

Weird. Maybe a perf archive would show something as it has some counters, but oh well.

#

Maybe it hit a checkpoint and had to restart a certain stage?

feral raven
#

hello team!

#

is there any update regarding the trial version of ontap select. I have received many comments that the trial cannot be accessed because it requires an active support contract?

#

Also, I would like to know if there is any initiative to provide NFR licenses for people who have netapp certifications?

dim roost
#

Honestly this sounds like a question for your account rep.

quaint ether
#

There's not anything like that that i'm aware of. Even before I joined netapp I have (and helped write) just about every non-cloud cert NetApp had, including SME and SME elite and NFR was never even talked about. There are labs out there for testing or the sim.

You can get temp keys for trials on systems via your account team. But they will expire after x time.

quaint ether
dim roost
#

O

quaint ether
#

sorry, NFC, why that was all caps

cosmic cave
#

It's been a while since I checked, but it at least used to be accessible from a guest account. Though maybe they broke that in the last big support site update. I had a guest level account for checking these things but I think it died.

dim roost
#

I'm pretty sure they tightened up licensing now for stuff like that.

#

If you buy a cheap CVO you should be able to be upgraded too.

cosmic cave
#

but its broken

#

I put in a non-technical feedback case. probably a black hole but worth a shot.

feral raven
#

I have just performed some tests

#

I have an account with guest access

#

try to access the ontap select trial download portal

#

but it is not working as reported on the image

#

But I appreciate your reply

rapid tartan
#

Just throwing it here in case someone also experienced the same issue. I've deployed the Nabox v3.03 as there is no upgrade path from the old version and the only metrics being tracked are Harvest - cDOT/NetApp Detail: Node - Details and Harvest - cDOT/NetApp Detail: Cluster. All of the other dashboards are empty. Old version of nabox worked perfectly so I just reused same configuration. Could it be that user role on the cluster has to be modified ? I've installed latest version of harvest and nmsdk.

dim roost
#

I had a problem with my lab NAbox but don't recall how they fixed it.

#

But I opened a github ticket and since I'm an employee they just logged into it real fast and fixed it.

#

If you find the Harvest github, look for my tickets (MrObvious)

#

Sorry but I'm in the middle of something else so I can't look myself.

rapid tartan
#

Thanks, I'll take a look

cosmic cave
cosmic cave
#

I found the PM and dropped them a note.

lime fern
#

Hello, may i ask how to get netap ontap simulator with guest account? i really struggle to find this for my own lab, all access is restricted:( Thank you

kindred pier
brazen jetty
#

That's correct.

lime fern
#

Hi @kindred pier thanks for feedback, is there any solution for me to be able to develop my ownlab with netapp as a storage system simulator?

dim roost
true finch
#

There's also a freemium version of CVO, but you'd still have to cover the cloud resources underneath.

dim roost
#

Does that give full Support site access?

#

I can ask someone else if you don't know.

true finch
#

when you get to the end and choose BYOL or PayGo, there's a third "Freemium" option, up to 500GB.

lime fern
#

Hi @true finch thanks for the Freemium info, yes i want to use it for srm,sra and other feature not too much size is okay as long as its storage simulator:)

dim roost
#

That may be beyond the use case of the simulator.

lime fern
#

So there is no "breaktrough" for VSA Net App simulator? :( okay thanks for the information, cheers

gusty ocean
#

I have a question about ActiveIQ Config advisor version 6.5

quaint ether
#

i see your post in the community. What's the error message?

summer swallow
#

Hello. Our Netapp is saying: Wed Apr 13 14:19:00 CEST [filer2:monitor.globalStatus.nonCritical:warning]: /vol/vol1 is full (using or reserving 98% of space and 65% of inodes, using 98% of reserve).

quaint ether
#

how much free space is left on your aggr?

#

df -A

#

If there's space there, you should be able to just grow the volume.

summer swallow
quaint ether
#

how many spares do you have?

#

aggr status -s