Hi Everyone, - I have a MC at a Customer site. First off, the ridges are NOT secured, although in-band management are enabled. Secondly, the bridge report errors that there are SAS ports offline. I checked and the system are running full "Quad-Path HA" - Is this something I need to worry about, and if so, how do I fix it? The off-lined ports versus the Quad-Path HA are quite confusing.
#MetroCluster Bridge Errors
1 messages · Page 1 of 1 (latest)
Unused enabled SAS ports lead to these messages. You can disable the ports to get rid of the error.
There is a guide how to secure the bridge: https://kb.netapp.com/onprem/ontap/metrocluster/How_to_secure_an_ATTO_FibreBridge_in_ONTAP_9.5_and_later
There is a bug in some older ONTAP versions, making the bridges appear as "not secured" even though they were secured earlier.
The OS is 9.13.1P6 I will disable the unused ports and see what happen.
Why I asked was 1. AIQ reports the following: Zoning on the MetroCluster backend switches is not correct. - But the system output shows the next: storage show disk -fields initiator
disk initiator
1.30.0 1d,1d,1c,1c,1d,1d,1c,1c
1.30.1 1d,1d,1c,1c,1d,1d,1c,1c
1.30.2 1d,1d,1c,1c,1d,1d,1c,1c
1.30.3 1d,1d,1c,1c,1d,1d,1c,1c
storage show disk -fields initiator
disk initiator
1.30.0 1d,1d,1c,1c,1c,1c,1d,1d
1.30.1 1c,1c,1d,1d,1d,1d,1c,1c
1.30.2 1d,1d,1c,1c,1c,1c,1d,1d
1.30.3 1d,1d,1c,1c,1c,1c,1d,1d
Presenting a wild mix of issues here. 😁 9.13.1 should be safe. I think Zoning will require a detailed look at the switch level.
Systems are A300s - ATTos are 7500N
You will have to check if the Switches have the correct RCF and the cabling fits. Maybe ConfigAdvisor can help to narrow it down. I haven't used that in a while...
Also be aware that 7500Ns are EOSL June 30 this year
yeah, and they will be rejected in 9.15.1 (just as 6500s are rejected for a while now)
As remote management are disabled - is there a way to look at the zoning through the inband management?
depends on the switches and the config. fcp zone show might work (it works with Brocade but not Cisco in our labs)
ah wait that is frontend only, scratch that, it won't show backend zoning
Don't confuse ATTO Bridges with SAN Switches. Who disables Switch access?
As part of the securing of the switches, the IP's should be removed, if I read the documention correct?
ATTO Bridges and SAN Switches are two different things. The ATTOs translate SAS signals from the disk shelfs to FC signals. The SAN Switches distribute the FC traffic between the two MetroCluster sites.
ATTO management/monitoring was moved to inline traffic because their IP stack is trash (ONTAP command storage bridge show). SAN Switches are monitored via Ethernet (ONTAP command storage switch show).