All Articles and Resources posts in Virtualization

SAN Info PowerShell Script

mcgue — Sat, 14 Nov 2020 00:11:51 GMT

Purpose

Performs a variety of checks against an ONTAP SAN based system and returns the results in an Excel spreadsheet. Following are the checks involved.

Compare the initiators defined in each igroup against the actual logged in initiators on each node.
Show total number of initiators per LIF.
Gather FCP adapter details that might have a best practice impact.
Compare selective LUN mapping reporting-nodes against the hosting HA pair, other nodes in the cluster, and nodes no longer in the cluster.

Requirements

NetApp PowerShell Toolki - https://mysupport.netapp.com/site/tools/tool-eula/powershell-toolkit
ImportExcel Module - https://github.com/dfinke/ImportExcel
ONTAP 9.x cluster

Script Information

Save script as SANInfo.ps1
Learn more about the script with the following:
get-help .\SANInfo.ps1 -Detailed
The script only performs read operations against the cluster to collect data.

Re: How to use the RBAC User Creator for Data ONTAP

konnerth — Fri, 03 Jan 2020 00:17:05 GMT

Please note that the RBAC User Creator tool (Windows executable) and ONTAP privileges file (XML) are posted on the NetApp Support site in the ToolChest for download:

https://mysupport.netapp.com/tools/download/ECMLP2434785DT.html?productID=61965&pcfContentID=ECMLP2434785

As said, the existing 7.X roles work properly with the 9.6 release. I am working to update the XML file to add 9.6 as a named release with no other changes.

The full set of privileges are described in this KB article:

https://kb.netapp.com/app/answers/answer_view/a_id/1001058

We are also working to replace this tool with functionality within ONTAP System Manager. It should be supported by the next Virtual Appliance release together with ONTAP 9.7 or later.

---Karl

Re: How to use the RBAC User Creator for Data ONTAP

jmcrosa — Tue, 03 Dec 2019 20:25:01 GMT

Michael, the existing 7.x roles may be used with 9.6.

Re: How to use the RBAC User Creator for Data ONTAP

sanadmin_stadtdo — Tue, 03 Dec 2019 08:17:20 GMT

Hi,

which specific roles are required for VSC 9.6? Is there a new XML file? The current download of the RBAC User Creator Tools contains only the roles for VSC 7 - or has nothing changed?

Many thanks

Michael

How to force vCenter to reload VSC/VASA GUI flash data for vSphere Web Client

RajeshPanda — Sun, 14 Apr 2019 17:24:20 GMT

When Virtual Storage Console (VSC) and VASA Provider are registered to vCenter, UI (user interface) extensions are pulled to vSphere. These UI extensions represent the framework that VSC and VASA Provider use to display data.

When new versions of VSC or VASA Provider are released they may be bundled with new UI extensions. During the upgrade process, VSC does not have the ability to delete the old UI extensions off of the vCenter server. These files must be removed manually. If old UI extensions are not removed then a conflict may arise which can cause display issues with the plugin.

During a upgrade of VSC or VASA Provider, it is highly recommended that the old UI extensions be removed.

Re: Closing Locked Files using PowerShell in cDOT

mbeattie — Tue, 15 Jan 2019 01:34:37 GMT

I know this is a really old thread now but for anyone still following...there are PowerShell CmdLets available for working with listing\closing CIFS files instead of using the CLI. See the help documentation for the following cmdlets:

Import-Module DataONTAP
Get-Help Get-NcCifsSessionFile -Full
Get-Help Close-NcCifsSessionFile -Full

Here is an "example" of a WFA command to close a CIFS file.

Note: If using the code below, note that the file UNC Path IS Case Sensitive from an ONTAP perspective but NOT from a Windows perspective

Param(
   [Parameter(Mandatory=$True, HelpMessage="The UNC Path of the file to close. The UNC Path must be enclosed in double quotes")]
   [String]$FileSpec
)
#'------------------------------------------------------------------------------
#'Split the UNC path of the file.
#'------------------------------------------------------------------------------
$fileSpec.Replace("""", "")
[Array]$elements    = $fileSpec -Split [regex]::Escape("\")
[String]$hostName   = $elements[2]
[String]$shareName  = $elements[3]
[String]$fileName   = $elements[$elements.Length -1]
#'------------------------------------------------------------------------------
#'Enumerate the IP Address of the hostname (it could be a DNS CName alias). 
#'------------------------------------------------------------------------------
[String]$ip = [System.Net.Dns]::GetHostAddresses($hostname).IPAddressToString
If([String]::IsNullOrEmpty($ip)){
   Throw "The host ""$hostName"" did not resolve in DNS. Please ensure DNS is configured"
}Else{
   Get-WFALogger -Info -Message "Resolved ""$hostname"" to IP Address ""$ip"""
}
#'------------------------------------------------------------------------------
#'Enumerate the host (DNS A Record) that resoloves to the IP Address (DNS PTR Record). 
#'------------------------------------------------------------------------------
[String]$fqdn = [System.Net.Dns]::GetHostEntry($ip).HostName
If([String]::IsNullOrEmpty($fqdn)){
   Throw "The IP Address ""$ip"" did not resolve in DNS. Please ensure DNS is configured"
}Else{
   Get-WFALogger -Info -Message "Resolved IP Address ""$ip"" to FQDN ""$fqdn"""
}
#'------------------------------------------------------------------------------
#'Enumerate the cluster name from the vserver name.
#'------------------------------------------------------------------------------
[String]$vserverName = $fqdn.Split(".")[0].ToLower();
[String]$mySqlQuery  = "SELECT cluster.name FROM cm_storage.cluster, cm_storage.vserver WHERE vserver.cluster_id = cluster.id AND vserver.name = '$vserverName'"
Get-WFALogger -Info -Message "Enumerating cluster name for vserver ""$vserverName"""
Try{
   $records = Invoke-MySqlQuery -Query $mySqlQuery -ErrorAction Stop
   Get-WFALogger -Info -Message "Invoked SQL Query`: ""$mySqlQuery"""
}Catch{
   Get-WFALogger -Error -Message $("Failed Invoking SQL Query`: ""$mySqlQuery"". Error " + $_.Exception.Message)
   Throw "Failed Enumerating cluster name for vserver ""$vserverName"""
}
[String]$cluster = $records[1].Name
If([String]::IsNullOrEmpty($cluster)){
   Get-WFALogger -Error -Message "The SQL recordset returned Null"
   Throw "Failed enumerating cluster name for vserver ""$vserverName"""
}
#'------------------------------------------------------------------------------
#'construct the folder path between the share and file name.
#'------------------------------------------------------------------------------
For($i=4; $i -lt ($elements.Count); $i++){
   [String]$folderPath += $elements[$i] + "\"
}
[String]$folderPath = $folderPath.SubString(0, $folderPath.Length -1)
#'------------------------------------------------------------------------------
#'Ensure the vserver is online and responding to ICMP requests.
#'------------------------------------------------------------------------------
If(-Not(Test-Connection -computername $vserverName -count 1)){
   Throw "The vserver ""$vserverName"" did not respond to an ICMP request"
}Else{
   Get-WFALogger -Info -Message "The vserver ""$vserverName"" responded to an ICMP request"
}
#'------------------------------------------------------------------------------
#'Connect to the cluster.
#'------------------------------------------------------------------------------
Connect-WFACluster $Cluster
#'------------------------------------------------------------------------------
#'Enumerate the open CIFS file.
#'------------------------------------------------------------------------------
$query         = Get-NcCifsSessionFile -Template
$query.Path    = $folderPath
$query.Share   = $shareName
$query.Vserver = $vserverName
Try{
   $file = Get-NcCifsSessionFile -Query $query -ErrorAction Stop
   Get-WFALogger -Info -Message "Enumerated file ""$FileSpec"""
}Catch{
   Get-WFALogger -Error -Message $("Failed enumerating file ""$FileSpec"". Error " + $_.Exception.Message)
   Throw "Failed enumerating file ""$FileSpec"""
}
#'------------------------------------------------------------------------------
#'Ensure the file is open.
#'------------------------------------------------------------------------------
If($Null -eq $file){
   Throw "The file ""$FileSpec"" is not currently open. Please check the UNC Path. Please note that the UNC Path is case sensitive."
}Else{
   Get-WFALogger -Info -Message $("Closing File ""$FileSpec"" on Node """ + $file.Node + """ -FileId """ + $file.FileId + """ -ConnectionId """ + $file.ConnectionId + """ -SessionID """ + $file.SessionId + """")
}
#'------------------------------------------------------------------------------
#'Close the open CIFS file.
#'------------------------------------------------------------------------------
Try{
   [String]$command = $("Close-NcCifsSessionFile -Node " + $file.Node + " -FileId " + $file.FileId + " -ConnectionId " + $file.ConnectionId + " -SessionID " + $file.SessionId + " -VserverContext " + $file.Vserver + " -Confirm`:`$False -ErrorAction Stop")
   Invoke-Expression -Command $command -ErrorAction Stop
   Get-WFALogger -Info -Message "Executed Command`: $command"
   Get-WFALogger -Info -Message "Closed file ""$FileSpec"" on vserver ""$hostname"""
}Catch{
   Get-WFALogger -Error -Message $("Failed Executing Command`: $command. Error " + $_.Exception.Message)
   Throw "Failed closing file ""$FileSpec"" on vserver ""$hostname"""
}
#'------------------------------------------------------------------------------

Hope that helps

/Matt

Re: Closing Locked Files using PowerShell in cDOT

dmitryyablonsky — Sun, 09 Dec 2018 13:58:58 GMT

Hi,

we try to implement the script on our environment .

The scirpt is working but we have an issue with lang he.UTF-8 support

It's seems there is a compatebility issue .

Please advise

Dmitry.

Re: Lab on Demand for NetApp employees / reselling partners

elionrs — Mon, 06 Aug 2018 18:13:45 GMT

Thanks

Re: SnapVault for SMVI 3.0 (SV-SMVI)

MAXIM_KRAMARENKO — Tue, 31 Jul 2018 09:17:43 GMT

Hello,

I try to make backup job with sv-smvi.cmd on Windows VSC 6.2.2, but got the error...

runLogin(): Setting username and password for storage controller DST_STORAGE ...
runLogin(): Testing login by ONTAP version from storage controller DST_STORAGE ...
Can't use string ("") as a subroutine ref while "strict refs" in use at /<C:\Program Files\NetApp\SV-SMVI\sv-smvi.exe>NaServer.pm line 544, <S> line 60.

How can I fix it?

Thanks.

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

ken_foster — Sat, 16 Jun 2018 05:49:38 GMT

The way to fix the problems are as follows: (I'm using ONTAP 9.3)

When configuring at the cluster level you may get the error "Missing Input: role-query".

The way to fix this to click the Login button and have it re-login to the cluster.

Fill out the form exactly as you had it filled out before and then re-submit the job.

It always works the second time.

2: if you are getting the "A Vserver admin cannot use directory vserver services unix-group" or "vserver services unix-user" with access level all"

The way to fix this is to edit the XML file and comment out lines 1585 and 1586. They will look like this

you might be thinking that you need them, no you don't. The lines right below them, that have "ontap-level-greater-equals="8.3"" have all of the individual commands listed.

I'm sure that some of the other command directory ones are something similar, but I have only had these two issues with 9.3

Re: How to use the RBAC User Creator for Data ONTAP

musicgreg — Sun, 10 Jun 2018 06:47:20 GMT

I have disabled versions of TLS lower than 1.2 on the cDOT clusters and now cannot connect with RBAC. Is there a way to fix this without re-enabling insecure versions?

Re: How to Use RBAC User Creator tool for Storage Replication Adapter 4.0

MSEBEL1980 — Wed, 30 May 2018 16:00:39 GMT

We've attempted creating new SVM-level users using this tool and then adding the SVM to SRA which is succesful but after running a "vserver list" we always get the following:

StorageController xxxxxxxx xxxxxxxx xxxxxxxxx 6f9cff68-033d-11e6-8078-00a0986a3a2f
FlexVol volname has 47905MB available out of 51200MB failed: Unable to find matching aggregate for volume
FlexVol volname_root has 972MB available out of 973MB failed: Unable to find matching aggregate for volume

We do not have these issues when using a user at the cluster level but we're attempting to do this at the SVM level.

Any ideas?

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Fri, 27 Apr 2018 03:42:29 GMT

Great news - glad that got it going for you!

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

tenn — Thu, 26 Apr 2018 16:43:08 GMT

I knew I had the latest Powershell but was not sure about putty and after getting the script to work with the clusters under 10 nodes I didn't think about checking the putty version. Come to find out thats what it was. Who would have thought.. -Thanks!!

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Thu, 26 Apr 2018 03:37:55 GMT

Sorry for my delay in getting back to you. Are you using the most current toolkit here: https://mysupport.netapp.com/tools/info/ECMLP2310788I.html?productID=61926&pcfContentID=ECMLP2310788. Also, do you have the most currently putty installer on the system you are running from?

So I ask as the newest toolkit changed around the Invoke-NcSsh cmdlet. I'm thinking that is what is going on. Let me know if you are using that new combination and I'll ask this over in the PowerShell forum that the developers check in on.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

tenn — Fri, 20 Apr 2018 17:52:59 GMT

McGue,

Let me start off by saying your script was my first experience with PowerShell and I must say I need to learn more. Took me a while to get it to work and have resolved multiple issues thanks to your script and my thanks go out to you. I am almost ready to start upgrading but I have ran into an issue on my larger clusters I am not able to resolve and have to assume it may be something with the script as it is happening on different clusters on different networks but at the same places and what they have in common is they are over 10 nodes. Want to make sure its the script beforehand so I will only post the first error that starts the snowball rolling.

On all clusters over 10 nodes the errors start on Section 14. The first 10 in section 14 are fine the I get.

Invoke-NcSsh: Index was out of range. Must be non-negative and less than the size of the collection.

Parameter name: index At 83upgradecheck.ps1:3866 char:27

+CategoryInfo : InvalidResult: (:) [Invoke-NcSsh], ArgumentOutOfRangeException

+FullyQualifiedErrorId : SshExecFailed,DataONTAP.C.PowerShell,SDK.cmdlets.toolkit.ssh.invokencssh

Then all the following nodes in that section get

Invoke-Ncssh : No connection could be made because the target machine actively refused it ipaddress:22 At 83upgradecheck.ps1:3866 char:27

+CategoryInfo : invalidresult: (:) [invoke-ncssh], Socetexception

+FullyQualifiedErrorId : SshExecFailed,DataONTAP.C.PowerShell,SDK.cmdlets.toolkit.ssh.invokencssh

I then have multiple other sections that get the same error that connection cannot be made..

HELP!!!!... Let me know if you need more info and i will give you what I can..

Re: Powershell script for updating Disk Firmware and Disk Qualification Package

Vikramjeet_Singh — Wed, 14 Mar 2018 19:44:06 GMT

Hey sbrack,

I am looking to do something similar but on CDOT

We are thinking to create a workflow to execute DQP through WFA

I dont see any package for this in WFA, so thought of creating one

can you please advice on how shall we proceed?

Will the above query also work on CDOT?

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

Shock — Mon, 26 Feb 2018 19:33:52 GMT

ERROR [ZapiUtils.createCModeLoginRole]: API FAILED: A Vserver admin cannot use command directory "security login profiles" with access level "all". Use a different access level.

I am trying to configure the VSC, VASA SRA 7.1 Appliance and when trying to use the RBAC User Create tool I get the error above.

I have replaced the ontapPrivs.xml with the 7.0 version but when I try to create a new user or modify an exisitng one to give them the following

privilege roles I seem to get the error no matter what options I select.

Re: Data ONTAP PowerShell Toolkit - Collect SYSSTAT type of information in CSV format

varatha — Thu, 08 Feb 2018 05:21:20 GMT

Do you have same script for cluster as well?

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

aengel4111 — Wed, 29 Nov 2017 21:33:41 GMT

Hi,

same like Saschas error in my environment. Error from the LOG was:

2017-11-29 17:25:24,860 DEBUG [ZapiUtils.modifyCModeLoginRole]: <security-login-role-modify>
<vserver>svm_cuba_esx</vserver>
<role-name>vvol_demo</role-name>
<command-directory-name>lun mapping create</command-directory-name>
<access-level>all</access-level>
</security-login-role-modify>

2017-11-29 17:25:25,129 ERROR [ZapiUtils.modifyCModeLoginRole]: Modify entry [lun mapping create(access all)] failed
2017-11-29 17:25:25,129 ERROR [ZapiUtils.modifyCModeLoginRole]: API FAILED: Missing Input: role-query

When I ignore the VSC 7.0 Version and use the old XML for 6.2 the process is working fine

Best regards

Andreas

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

ashruthi — Wed, 29 Nov 2017 12:03:38 GMT

: Did you replace the xml with the one attached in this community article? I hope the errors should not be seen after that. The attached xml file is the most recent version of the privileges required for the product.

: Looks like the tool is failing to assign certain privileges to the user. You could try running a set of commands directly from the Ontap CLI to create new roles by following the KB article which I have mentioned below:

For creating roles and users at the cluster level, please check https://kb.netapp.com/app/answers/answer_view/a_id/1001058

For creating roles and users at the SVM level, please check https://kb.netapp.com/app/answers/answer_view/a_id/1001056

Re: How to use the RBAC User Creator for Data ONTAP

raphaelk — Thu, 19 Oct 2017 13:21:02 GMT

Hi all,

I am looking for a RBAC User Creator version which supports SnapDrive for Windows Version 7.1.x and ONTAP 9.x.

In first instance a description about the miminum capabilities needed for SnapDrive 7.1.x and ONTAP 9 would help as well Unfortunately in the official documentation it is only advised to use the vsadmin. .To use the vsadmin user or role is not granular enough for my customers security requirements.

Thank you in advance for any help and hint.

Raphael

Re: Making The Most Of Data ONTAP PowerShell Toolkit

Rodrigo_Saez — Tue, 17 Oct 2017 09:02:17 GMT

Hello,

I am really scratching my head trying to get this command going on my CSV volumes:

Invoke-NcHostVolumeSpaceReclaim

After some testing learnt CSV volume needs to be put on maintence mode which is an issue as data will not be accesible for the cluster during that time!

In any case, I see no space reclaimed from Netapp GUI after this command runs succesfully for some minutes... I see no CSV temporarily going to 99 % usage either.

Any more ideas? I am about to give up 😕

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

skuebart — Tue, 19 Sep 2017 09:33:57 GMT

I receive the error "Command failed: Missing Input: role-query" when I try to create a user via RBAC user creator for VSC and VASA Provider 7.0 for all Data ONTAP privilege roles (Discovery, Create Storage, Modify Storage, Destroy Storage and Policy-Based Mgmt). The XML-file was replaced as described in your article. I am using RBAC tool version 2.7 and Data ONTAP 9.2.

Do you have any ideas what causes this issue?

Thank you in advance and kind regards,

Sascha

Re: RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSp

dhickey — Thu, 31 Aug 2017 14:26:29 GMT

When using this XML I've run into issues. Many invalid commands due to version levels. As near as i can see the syntax of ::

ontap-level-greater-equals

ontap-level-less

do not work (v2.7 of the tool). Is there a more recent version of the tool that allows for this? I've used

<ontap-dependent value="xxx">

...

</ontap-dependent>

as a work around.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

wertk — Fri, 04 Aug 2017 18:56:00 GMT

Hi Tim, i'm in a situation where the SVM mgmt LIF can't reach external services, but the data LIF can. Your script is coded such that if it finds a SVM mgmt LIF attempts to contact external services, and regardless of the results doesn't try the same connection test with the data LIF. Question is, will the upgrade fail if this is not remediated? In other words, will ONTAP try the data LIF after the mgmt LIF failed to contact external services?

The management LIF has a wide open firewall (used for CIFS style backup) but resides on a different VLAN. This is a hosting company the network is very segmented.

I'd rather not go through the hassle of remediating this particular problem if it's not necessary.

Thanks in advance.

Kory

RBAC User Creator tool for VSC, VASA Provider and Storage Replication Adapter 7.0 for VMware vSphere

ashruthi — Thu, 03 Aug 2017 13:43:17 GMT

Introduction

The RBAC User Creator for ONTAP® tool is a C# application that enables you to create RBAC users within ONTAP.
The list of privileges created are stored in an XML (ontapPrivs.xml) file. The XML file enables you to gather the following information:

1. You can verify the privileges of the new user created by RBAC User Creator tool.
2. You can add privileges or products later without the need to recompile the application.

The RBAC User Creator tool is a framework where all the products and the privileges for those products are listed in the XML file. You can easily add support for another product or product version by updating the information in the XML file.

RBAC User Creator tool for Virtual Storage Console, VASA Provider, and Storage Replication Adapter 7.0

This article describes how to use the RBAC User Creator tool for Virtual Storage Console, VASA Provider, and Storage Replication Adapter 7.0 for VMware vSphere. You can use the tool to create users for the below functionalities:

1. Virtual Storage Console
2. Virtual Storage Console and VASA Provider
3. Virtual Storage Console and Storage Replication Adapter
4. Virtual Storage Console, VASA Provider and Storage Replication Adapter

Please note that VSC, VASA Provider, and SRA 7.0 supports ONTAP versions 9.0 onwards only.

Once you have downloaded and installed the RBAC User Creator tool from the ToolChest, you will need to perform the below steps to provide support for VSC, VASA Provider and SRA 7.0.

Step 1: Replace XML for VSC, VASA Provider and SRA 7.0 support

To enable support for VSC, VASA Provider and SRA 7.0, please perform the following:

1. Download and keep a copy of the ontapPrivs.xml file (attached below).
2. Access the install directory of the RBAC User Creator tool.
This information is provided during installation. For example:- The default path would be: C:\Program Files (x86)\NetApp\RBAC User Creator
3. Replace the existing ontapPrivs.xml file with the downloaded .xml file.
4. Restart the RBAC User Creator tool.

You can start using the RBAC User Creator tool to create new roles and users.

Step 2: Setting up user names and privileges

You can create ONTAP user names with the privileges required for VSC, VASA Provider and SRA.

1. Enter the name of the admin user and IP of the storage system for which you want to create the user.
2. Click LOGIN .
The tool determines the controller type.
3. As the storage system is running ONTAP, the list of SVMs are displayed.
RBAC User Creator supports creating users on the Cluster-Admin SVM as well as on Data SVMs. Select the appropriate SVM from the drop-down list.
4. Select the product and product version depending on your requirements.
• For 7.0, you must select product as “VSC, VASA Provider and SRA”.
• If you wish to use only VSC, you must select product version as “VSC 7.0”.
• If you wish to use VASA Provider along with VSC, then you must select the product version as “VSC and VASA Provider 7.0”.
• If you wish to use SRA along with VSC, then you must select the product version as “VSC and SRA 7.0”.
• If you wish to use all three, VSC, VASA Provider and SRA, then you must select the product version as “VSC, VASA Provider and SRA 7.0”.
5. Select all the ONTAP privilege roles that apply.
RBAC User Creator tool merges all the privileges from the selected roles and combines them in a sorted list.
6. Enter a name for the role, user, and password, and then click Submit.
NOTE: RBAC User Creator requires admin storage credentials for creating new user names.

Step 3: Adding storage systems

1. Log in into your VSC, VASA Provider and SRA plugin from the vCenter.
2. Add the storage system using the new username and password.

Known issues

While providing a role name, do not provide any names that begin with “vsadmin”. This will prevent creating any new roles or users.

Downloading and using RBAC User Creator

Refer to the following link for details regarding download and usage of RBAC User Creator tool:
How to use the RBAC User Creator for ONTAP

Resources

Download RBAC User Creator for ONTAP

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

jwolf — Wed, 31 May 2017 00:08:01 GMT

Thanks again for this excellent tool! We are now using it primarily for ONTAP 9.x upgrade planning, and we are making heavy use of the SAN section. We're even considering running the script regularly (not just for upgrades) to check for initiators not connected to all nodes in a given cluster (iscsi).

Is there a way to distill the detailed SAN output ($SANDisplayFullOutput) to only include the LUNs with errors? The detailed output in that section is fantastic, but it's daunting to scroll through all of the results when it includes the healthy ones. Is there any easy way to display only those LUNs/igroups that need attention?

For this purpose, we don't need to see the mapped LUNs with no active initiators (warnings) or "correct" configs (no errors/warnings) -- I only really want to see the LUNs where an initiator is only logged in to one node or where initiators are not logged in to all nodes in the cluster (errors).

I've tried using the following command to pull out the details when an error is encountered, but because the output has inconsistent carriage returns and other errors stuck in the middle of the output, it's still pretty messy:

cat results.txt | grep -B 20 "Not logged in on all nodes or ports" >> results_filtered.txt

The "Not logged in on all nodes or ports" message seems to always come at the end of the output for a specific lun, so I chose to pull out 20 lines above that string to try to capture all the important details, but in some cases, the "All access to this LUN is via proxy paths" or "Currently logged in only on a single node and will be unavailable during a takeover" error messages are stuck in the middle of the LUN details, so it makes the 20 lines not always work. Obviously different cluster sizes will also impact this output (more nodes = more lines), so I'm hoping to find something that works reasonably well for most scenarios.

Is there a quick and dirty way to do this using the script, or is it just time I learned PowerShell?

Thanks again!

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Tue, 30 May 2017 02:20:40 GMT

It looks like you are facing the issue described here:

http://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=846976

There is a procedure to correct on the cluster; however, it requires involvement of technical support. I would suggest opening a new support case to get proper guidance on the procedure.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

Mahen — Mon, 29 May 2017 04:37:18 GMT

Hi McGue,

This script is very useful, Thanks!

while running this script, I'm getting this Error Message.

Section 41) Checking to ensure the system file /var/INTERNCONFVERS reflects the currently installed version
___________________________________________________________________________________________________________
***** Error Found *****
The value in /var/INTERNCONFVERS is either missing or invalid. Full contents of the /var/INTERNCONFVERS is below.


Error: command failed: SSH keys missing on the local node: use the "debug
       system regenerate-systemshell-key-pair" (privilege diag) command to
       regenerate the keys.



***** Error Found *****
The value in /var/INTERNCONFVERS is either missing or invalid. Full contents of the /var/INTERNCONFVERS is below.


Error: command failed: SSH keys missing on the local node: use the "debug
       system regenerate-systemshell-key-pair" (privilege diag) command to
       regenerate the keys.

Re: How to Use RBAC User Creator tool for Storage Replication Adapter 4.0

diez — Thu, 04 May 2017 13:30:58 GMT

Thanks for doing this! Appreciated the work done

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mikesmit — Thu, 13 Apr 2017 16:17:38 GMT

Thanks mcgue! Specifically I think the client is in need of a way to bypass or modify the number of DCs/Nameservers queriec while the script is running. Would it be possible to provide a list of "known good DCs/nameservers" to the script in order to expedite the upgrade check script completion?

Thank you for a terrific script. We used this script exhaustively across the current client I support globally. Very helpful.

Regards,

Mike Smith

PSC - resident

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Wed, 12 Apr 2017 21:34:12 GMT

Update 2.5 of the script coming, pending publish of this page. Updates from suggestions in these comments:

Increased buffer size for the PowerShell window to have more data able to be captured in HTML and RTF output.
Removed infnite volume check for systems already on 8.3.
Added output showing quantity of each name service servers that were queried.
Fixied the summary portion of the SAN section to more accurately reflect what was captured in the main portion of that section.

Re: How to use the RBAC User Creator for Data ONTAP

jmcrosa — Tue, 11 Apr 2017 21:51:48 GMT

SRA 4.0 Support is available using the OntapPrivs.xml file found in the following link:

https://community.netapp.com/t5/Virtualization-and-Cloud-Articles-and-Resources/How-to-Use-RBAC-User-Creator-tool-for-Storage-Replication-Adapter-4-0/ta-p/127421

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Tue, 11 Apr 2017 18:01:49 GMT

mikesmit - thanks for the feedback. There is an issue that the update could fail on the check when there is a large number of CIFS domain servers discovered. It is awaiting a public report here: http://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1050695

In reference to the script it mimics the same activity that the update itself goes through. I'm going to make an update to the script to put some more output in this section as to where it is in the queries of name service servers so you can see which particular one is taking a long time to query.

Re: How to use the RBAC User Creator for Data ONTAP

TiMatrix — Thu, 06 Apr 2017 08:26:16 GMT

Hi,

since the XML file is outdated, when can we expect an updated version?

Thanks,

Tino

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mikesmit — Wed, 05 Apr 2017 19:47:02 GMT

Too many Domain Controllers - script is hanging.

Client has a scenario where there are many, many Domain Controllers/Name Servers and on top of that they have many SVM's. The script is hanging for long periods of time checking the DC's/Name-servers for each SVM. I suspect there may be some stale entries in the Discovered DC list but should it take 8-10 minutes for section/step 29 alone? Here is the comment from the client:

This script is hanging on Name Server query. BAC has a flat network and the script is hanging because it’s trying to query 13k name servers. Do we need query all name servers? Can we adjust the script so that once we successfully connect to a name server, the script moves on?

So the question is: Is there a way to minimize the number of DC's/Name-servers that get queried while the 83upgradecheck script is running?

Regards,

Mike Smith

Re: How to use the RBAC User Creator for Data ONTAP

vanhees — Thu, 16 Mar 2017 08:26:22 GMT

Hi, When can we expect support for SRA 4.0 and Ontap 9.x?

Thanks

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

borisaelen — Wed, 01 Mar 2017 21:48:10 GMT

Hi McGue.

WHAT A FANASTIC SCRIPT!!!

Thanks so much for writing and sharing this with us!

Very very thanksful for it and will use it in an upgrade from 8.2 -> 8.3.2 this week on 4 Clusters.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Thu, 23 Feb 2017 17:38:53 GMT

I had a few people ask if this script would be useful in doing an ANDU from 8.3 to 9.1. There are a few sections that would be helpful. I put a new article together here: http://community.netapp.com/t5/Data-ONTAP-Discussions/Upgrading-Clustered-Data-ONTAP-8-3x-to-ONTAP-9-1-Using-Automated-Nondisruptive/td-p/128391

How to Use RBAC User Creator tool for Storage Replication Adapter 4.0

ashruthi — Tue, 31 Jan 2017 15:55:27 GMT

Introduction

The RBAC User Creator for ONTAP® tool is a C# application that enables you to create RBAC usernames within ONTAP. You can use the RBAC User Creator tool to create users in both 7-mode and ONTAP environments.

The list of privileges created are stored in an XML (ontapPrivs.xml) file. The XML file enables you to gather the following information:

1. You can verify the privileges of the new user created by RBAC User Creator tool.
2. You can add privileges or products later without the need to recompile the application.

RBAC User Creator tool for Storage Replication Adapter 4.0

The RBAC User Creator tool is enhanced to allow creating new roles and users required for Storage Replication Adapter (SRA) 4.0 by adding additional information in the XML file.

Please note that Storage Replication Adapter (SRA) 4.0 supports ONTAP versions 8.3.2 onwards only.

Once you have downloaded and installed the RBAC User Creator tool from the ToolChest, you will need to perform the below steps to provide support for SRA 4.0.

Step 1: Replace XML for SRA 4.0 support

To enable support for SRA 4.0, please perform the following:

You can start using the RBAC User Creator tool to create new roles and users.

Step 2: Setting up user names and privileges

You can create ONTAP user names with all the privileges required for SRA.

1. Enter the name of the root or admin user and IP of the storage system for which you want to create the user.
2. Click LOGIN .
The tool determines the controller type.
3. As the storage system is running ONTAP, the list of SVMs are displayed.
RBAC User Creator supports creating users on the Cluster-Admin SVM as well as on Data SVMs. Select the appropriate SVM from the drop-down list.
4. Select the product and product version.
For SRA 4.0, you must select product as “SRA for VMware SRM” and product version as “SRA 4.0 for VMware SRM”.
5. Select the ONTAP privilege role as “NAS/SAN Role”.
RBAC User Creator tool merges all the privileges from the selected roles and combines them in a sorted list.
6. Enter a name for the role , user, and password, and then click Submit.
NOTE: RBAC User Creator requires root or admin storage credentials for creating new user names.

Step 3: Adding storage systems

1. Log in into your SRA 4.0 system.
2. Add the storage system using the new username and password.

Known issues

While providing a role name, do not provide any names that begin with “vsadmin”. This will prevent creating any new roles or users.

Downloading and using RBAC User Creator

Refer to the following link for details regarding download and usage of RBAC User Creator tool:

How to use the RBAC User Creator for ONTAP

Resources

Download RBAC User Creator for ONTAP

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Tue, 31 Jan 2017 00:25:09 GMT

Thanks Jefferyh for the tip! Good to know, that's worthwhile to make the change as the HTML and RTF are definitely a lot friendlier to use output.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

jefferyh — Thu, 26 Jan 2017 05:14:51 GMT

First, let me say AWESOME script! This is very helpful.

Also, I noticed a warning at the end of the script that stated that the RTF and HTML files were limited by PowerShell to 9999 lines. I was able to overcome this limitation by entering these commands prior to running this script.

$pshost = get-host

$pswindow = $pshost.ui.rawui

$newsize = $pswindow.buffersize

$newsize.height = 32766
$newsize.width = 160

$pswindow.buffersize = $newsize

Change the buffer size numbers to suit your environment. It looks like 32766 is the limit for the buffer height on Windows 7.

Hope this helps someone!

Re: How to use the RBAC User Creator for Data ONTAP

bcstorage — Thu, 01 Dec 2016 20:56:04 GMT

I just downloaded the tool today and tried to lauch it per the instructions. The status bar goes about half way and stops. In the log, I see the following:

2016-12-01 15:48:10,195 DEBUG [UserCreator.processLoginRequest]: Storage System : 172.16.2.35
2016-12-01 15:48:10,195 DEBUG [UserCreator.processLoginRequest]: Storage Username : root
2016-12-01 15:48:10,196 DEBUG [UserCreator.processLoginRequest]: Storage Password : *HIDDEN*
2016-12-01 15:48:10,196 DEBUG [UserCreator.processLoginRequest]: Storage Port : 443
2016-12-01 15:48:10,196 DEBUG [UserCreator.processLoginRequest]: Storage useSSL : True
2016-12-01 15:48:10,227 DEBUG [ZapiUtils.getNaServer]: NaServer Hostname : 172.16.2.35
2016-12-01 15:48:10,227 DEBUG [ZapiUtils.getNaServer]: NaServer Type: FILER
2016-12-01 15:48:10,227 DEBUG [ZapiUtils.getNaServer]: NaServer TransportType: HTTPS
2016-12-01 15:48:10,227 DEBUG [ZapiUtils.getNaServer]: NaServer Port: 443
2016-12-01 15:48:10,228 DEBUG [ZapiUtils.getNaServer]:
2016-12-01 15:48:10,228 DEBUG [ZapiUtils.getNaServer]:
2016-12-01 15:48:10,244 DEBUG [ZapiUtils.getSystemVersion]: <system-get-version/>

2016-12-01 15:48:10,280 ERROR [ZapiUtils.getSystemVersion]: Failed invoking API

We are running 8.2.3P4 7-Mode. I'm not sure what to try at this point.

Thank you,

Bill

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Wed, 16 Nov 2016 15:39:23 GMT

Good eye wertk! We did some testing with 2.3 and found one of the output lines regarding changing a failover group was worded awkwardly. Figured would update to 2.4 since technically it was a change but it didn't change any of the actual tests. Hopefully this is the last of any updates to this script.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

wertk — Mon, 14 Nov 2016 17:23:43 GMT

. You noted the v2.3 changes in a earlier comment but i don't see a similiar post for v2.4. What changed in 2.4? Thanks in advance

Re: Implementing OpenStack Block Storage with NetApp Storage

yvgr79in — Fri, 28 Oct 2016 13:09:55 GMT

The item does not exist. It may have been deleted.

Re: How to use the RBAC User Creator for Data ONTAP

mdaly1234 — Tue, 18 Oct 2016 15:00:13 GMT

Hi,

I just downloaded the latest version (I think - v2.7), and it doesnt have support for VSC 6.2 in it, is this something that is available somewhere else?

Thanks!

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Mon, 12 Sep 2016 13:49:42 GMT

VIRTUALGEEK2,

Can you try with the 2.4 version updated in August and let me know if you are seeing the same issue?

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

VIRTUALGEEK2 — Mon, 12 Sep 2016 04:53:19 GMT

Can you please update the script to correct the false failover group report?

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

mcgue — Fri, 12 Aug 2016 15:53:03 GMT

Version 2.3 is forthcoming with these changes:

Don’t run certain sections if the cluster is already on 8.3.
Single node cluster check changes.
Fixed an issue with RTF/HTML outputs with PowerShell 5.
Check MTU for unused failover groups.
Show a summary of good LUNs in SAN section.
Change to network section to better handle failover groups in 8.3+
Added sleep to Invoke-NcSSH cmdlet runs to allow for session to complete.
Allow only IP based LIFs to be selected for ping tests

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

wertk — Tue, 02 Aug 2016 14:43:16 GMT

I ran the script against a single-node cluster, but some of the errors make me think the script isn't aware that some checks don't apply. Is this true?

Re: Exporting VSC Alignment Scan reports

mc1980 — Tue, 12 Jul 2016 18:18:56 GMT

I really hope I can get this to work so please respond if you have the time.

#'Create a requestSpec object and set credentials.

#'---------------------------------------------------------------------------

[System.Object]$requestSpecType = ($namespace + '.requestSpec')

[System.Object]$requestSpec = New-Object ($requestSpecType)

[System.Object]$requestSpec.serviceUrl = "https://" + $vscHostName + "/sdk"

[System.Object]$requestSpec.vcUser = $vscUsername

[System.Object]$requestSpec.vcPassword = $vscPassword

For this item, do we want the server name of our vCenter Web Client or the server name of the Virtual Storage Console server? I didn't install the VSC on the same server as my vCenter Server or vCenter Server Web Client (don't ask - inherited this environment)

Also, receiving this error:

Error "Exception calling "getAlignmentReport" with "1" argument(s): "org.springframework.beans.factory.config.ObjectFactoryCreatingFactoryBean$TargetBeanObjectFactory cannot be cast to com.ne
tapp.caster.server.VSphereSessionContext"" invoking the "GetAlignmentReport" Method

Any thoughts?

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

cbiebers — Thu, 07 Jul 2016 14:58:38 GMT

When you have upgrade to 8.3.2+ CDOT changes how it does its management (AD/NIS/LDAP/DNS/iSNS/etc) network traffic so that instead of being specific to the node, and going out the node management lif, its handled at the SVM level through the management LIF.

You put the management LIFs on the first node to be upgraded (despite the fact that you're going to reboot it right away) so that when it has rebooted and comes up as the only node on the new version, these SVMs all have a valid management LIF that can be used for this network traffic. You'll also note one of the checks has you ensure that for the first node you make sure you have a failover group that is different than normal as well. Thats to ensure that these LIFs move back to that first node, and not elsewhere in the cluster where you're not yet at the new version. This is covered in a bit more detail in the "SVM networking considerations for major upgrades" section of the upgrade doc, along with the rest of the pre-requisites.

You're absolutely right its a lot to take in when planning your first 8.2 to 8.3 upgrade. Keep asking questions though, you're on the right track.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

MAXWELL_CROOK — Thu, 07 Jul 2016 15:27:52 GMT

Hi thanks for the feeback, why do you need to move all of the home nodes to node 1 (the first node to upgrade) as when that goes down all the management goes down with it (well fails over to node 2) seems an odd ask. I have gone through the upgrade document and its not clear to me why you'd do this. This and the routing changes for someone thats mainly SAN experienced is quite a lot to get your head around 😞

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

cbiebers — Thu, 07 Jul 2016 13:46:17 GMT

The warning is reminding you that when you go to do the upgrade you want to make certain that all the SVMs management LIFs have their home node set to the same node, and that this is the first node you're going to upgrade.

If you to this for each of the SVM mgmt LIFs:

net int modify -vserver xxxx -lif llll -home-node nnnnn -home-port pppp

net int revert -vserver xxxx -lif llll

You'll resolve this particular warning; there is no need to destroy and re-create the lifs.

Note: The Powershell script is doing the checks that are outlined in the OnTap Upgrade and Revert/Downgrade Guide. If you haven't already done so, I strongly recommend reading through that guide prior to doing your upgrade. It has more details on all the checks and the upgrade process itself.

Re: How to Check Data ONTAP 8.3.2 Upgrade Requirements Using a PowerShell Script

MAXWELL_CROOK — Thu, 07 Jul 2016 09:56:20 GMT

I get this error on a few of the Vservers we have and I dont know if its something I can correct by manually migrating the lif to the first node to be upgraded or do I have to create another lif on the first node and blow the one below away as its on node 4 ?

netapp001vse01_CIF_DR_mgmt LIF does not have a home node that matches the first node to be upgraded of netapp001-01

Re: How to use the RBAC User Creator for Data ONTAP

Takefumi — Tue, 28 Jun 2016 01:44:33 GMT

Hi,

One of our customer need to provide public cloud service as IaaS environment and they are considering to use VSC with NFS only environment. And it is made for multi-tenants environment. I want to know about role of cdot for only Discovery and Backup privilege under NFS only environment. We can find Backup role from RBAC User creator but it maybe contain for iSCSI environment like Volume Create/Clone/Delete. We want to remove unnecessary privileges from it. Does anyone know about role set for only NFS datastore?

*Backup role

<role id="backup-recovery" label="Backup-Recovery"

description="This role allows for the backup and restore of datastores and virtual machines">

<all-access>

<command>job history show</command>

<command>lun delete</command>

<command>lun igroup add</command>

<command>lun igroup create</command>

<command>lun igroup delete</command>

<command>lun igroup show</command>

<command>lun online</command>

<command>lun serial</command>

<command>network interface</command>

<command>security login role show-ontapi</command>

<command>version</command>

<command>volume clone create</command>

<command>volume create</command>

<command>volume destroy</command>

<command>volume file</command>

<command>volume mount</command>

<command>volume offline</command>

<command>volume qtree show</command>

<command>volume show</command>

<command>volume snapshot create</command>

<command>volume snapshot delete</command>

<command>volume snapshot rename</command>

<command>volume snapshot restore-file</command>

<command>volume snapshot show</command>

<command>volume unmount</command>

<command>vserver</command>

<command>vserver export-policy show</command>

<command>vserver fcp nodename</command>

<command>vserver fcp status</command>

<command>vserver iscsi nodename</command>

<command>vserver iscsi status</command>

<ontap-dependent value="8.2+">

<command>snapmirror</command>

<command>vserver peer show</command>

</ontap-dependent>

<ontap-dependent value="8.2.2+">

<command>event generate-autosupport-log</command>

</ontap-dependent>

<ontap-dependent value="8.2.99-">

<command>lun igroup new</command>

<command>lun initiatorListMap show</command>

<command>lun mapped show</command>

<command>lun unmap</command>

<command>volume clone new</command>

<command>volume new</command>

<command>volume qtree new</command>

<command>volume snapshot new</command>

<command>vserver export-policy new</command>

</ontap-dependent>

<ontap-dependent value="8.3+">

<command>lun create</command>

<command>lun mapping create</command>

<command>lun mapping delete</command>

<command>lun mapping show</command>

<command>lun mapping show-initiator</command>

<command>volume qtree create</command>

<command>vserver export-policy create</command>

</ontap-dependent>

</all-access>

</role>

Re: How to use the RBAC User Creator for Data ONTAP

SimStep — Wed, 06 Apr 2016 20:46:35 GMT

Just an FYI.......

When using the RBAC User Creator tool, be sure to use a password for the new user that adheres to the password complexity policy as set in ONTAP. Based on our experience, the RBAC tool will not notify you of an error in the user creation process if the password is weak. When my storage admin was running the tool, he was using a very simple password for the new user (this was just for testing purposes). Even though the tool would report successfull user creation, he was unable to find the created user when he connected to the storage system via SSH. When trying to create the user manually (with that same simple password) via command line, ONTAP would return an error regarding the password strength. It was a simple problem, but not very apparent when solely relying on the information returned by the RBAC tool.

Thanks,

Steve

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

KHerrick — Fri, 01 Apr 2016 13:29:01 GMT

Hello,

Thank you for this script..very helpful! I am running this against a 6 node cluster and keep getting this message no matter which Node I chose to upgrade first "clesan01_mgmt LIF does not have a home node that matches the first node to be upgraded of cle-nacl01-06" . The home node this lif resides on is Node 3.

Thanks

Kathy

Re: Making The Most Of Data ONTAP PowerShell Toolkit

tmac — Thu, 17 Mar 2016 18:20:09 GMT

Ugh. Sadly, I ran into this exact problem last week on Windows 10. It stopped exactly where yours did. I could not figure out what the heck happened. Something I installed must have done something to something else that caused Powershell to underreact to loading the dataontap module. Debugging efforts were fruitless.

I built a Win10 VM to rule things out, but the DataONTAP module loaded just fine.

I bit the bullet, so to speak and reloaded my laptop (wanted to do that anyway, now I had a solid reason)

The DataONTAP module now loads fine and I see all the commands.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Sat, 12 Mar 2016 21:38:46 GMT

Glad you were able to get it working with the workaround. You might have an old version of the PowerShell toolkit out there. Look above at some of the comments from brandon_lee for some helpful ideas on cleaning up the previous versions.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

asdfsdf — Wed, 27 Mar 2019 01:49:47 GMT

Hi mcgue, works like a charm now. Initially had an issues with the "This script requires Data ONTAP PowerShell Toolkit 3.2.1 or higher." (I Had all up-to-date componenets installed...). The workaround was to comment out your entire Check toolkit version.

It works great now! For those experiencing this issue, my solution was to comment out lines 554 through to 568.

Cheers.

-Pash.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Thu, 03 Mar 2016 07:13:22 GMT

If you look at the script output in the bottom summary section there will be a line fully populated with the -RunSection sections that had either a warning or error during that script run. Then you can make changes, and re-run it testing only the failed sections. Also, the section you are referring to is ExternalServer.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

asdfsdf — Wed, 02 Mar 2016 17:23:09 GMT

Thanks mcgue.

Under which 'section' of the script do these tests run?

I'm trying to find the right one to use the -RunSection flag with, tried a few and no luck yet. I don't like having to sit through the entire output when these are the last tests that are failing.

Please excuse the username, my right hand was probably occupied by a sandwich or a delicous cookie when I setup the account 😉

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Wed, 02 Mar 2016 04:21:49 GMT

asdfsdf,

Check your NIS servers that are defined for that SVM. Likely they are not actually NIS servers but possibly DNS or AD servers inyour environment thus not responding to NIS requests. If you have NIS servers defined and don't actually need NIS services, then you can remove them and re-run the script.

BTW - great username!

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

asdfsdf — Wed, 27 Mar 2019 01:51:11 GMT

DA I'd like to know what happened as well...mcgue's script is telling us that "Test connections failed to at least one server type..." I'm trying to figure out how to rememdy this...we've got data LIFS configured for the SVM, but no SVM mgmt LIFS...system is a swtichless pair of 8040's running CDOT 8.2.3p2 - Any help is appreciated. (I should add, that in the previous step all external servers respond to ping, so external servers are accessible via the SVM data LIF ). More details below:

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Fri, 26 Feb 2016 15:00:22 GMT

DA,

I'm not sure I follow exactly what happened post upgrade. Can you send me more details as to what you experienced?

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

DA — Fri, 26 Feb 2016 00:00:25 GMT

We check for external servers connectivity but recently I had an issue where SVM mgmt was pinging DNS servers and we went ahead with the upgrade however, there was a firewall issue between SVM mgmt and DC servers which created issues for CIFS authentication. Anyway we can include this in the checks?

PS. Great script and thank you for it!

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Wed, 24 Feb 2016 05:06:48 GMT

pogranovich,

This is a requirement only for the upgrade and only for one LIF per SVM. It is outlined in the Upgrade Guide. I'll change the wording on the next release to make it more clear. There is no reason to change any other LIFs to have any different failover group members. See section 6a in the following link for the failover group member requirement for the external server accessing LIF:

https://library.netapp.com/ecmdocs/ECMP12458273/html/GUID-E5EBF14B-9DEA-4835-B8AB-659BF5E64997.html

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

pogranovich — Tue, 23 Feb 2016 23:35:28 GMT

Hello,

While running this script on a 4 node cluster I am getting this error message:

***** Error Found *****
The failover group must contain exactly 2 nodes and a0a-212_failover contains avnacluster01-01 avnacluster01-02 avnacluster01-03 avnacluster01-04

Why would this be a requirement for a failover group to have exactly 2 nodes on a 4 node cluster?

Thaks,

Paul.

Re: SnapVault for SMVI 3.0 (SV-SMVI)

Frybiz — Wed, 10 Feb 2016 15:06:21 GMT

Hi all,

We are using VSC 4.2.2 with sv-smvi 3.0.2. Backup are running fine to primary filer. I'm getting this error code for post_backup in sv-smvi script. Snapvault relation between primary filer and seconary exists and manual update works but by script no.

Script sv-smvi.cmd completed successfully in phase PRE_BACKUP

Script sv-smvi.cmd failed with code 21 in phase POST_BACKUP

Any idea ?

Regards

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Tue, 09 Feb 2016 17:42:49 GMT

Thanks for the feedback dbalaatt. So there is some checking now for failover group targets for each interface, but I'm not sure that is exactly what you are looking for. Can you give me more details or an example you saw?

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

dbalaatt — Tue, 09 Feb 2016 07:46:07 GMT

Thanks for the fantastic script... If you could include VLAN tagging check on all nodes, we can avoid any outage during the lif migration during the node reboot.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Wed, 27 Jan 2016 03:32:39 GMT

Joe-Pollard,

Thank you for the feedback. The two node requirement for a failover group is covered in section 6a here:

https://library.netapp.com/ecmdocs/ECMP12458273/html/GUID-E5EBF14B-9DEA-4835-B8AB-659BF5E64997.html

The goal is to ensure that external server accessing LIF is fully functional throughout an upgrade regardless of any other issues that might come up.

It is important to know that only one LIF per SVM needs to be configured like this and it is only needed to be configured that way for the actual upgrade. Keeping failover groups optimal on an ongoing effort is covered here: https://library.netapp.com/ecmdocs/ECMP1636021/html/GUID-94D4F8DD-3437-4474-81A6-9DB6FF6A244D.html

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

Joe-Pollard — Fri, 22 Jan 2016 12:45:25 GMT

I am also a little confused about the section

The failover group must contain exactly 2 nodes and MGNT contains

Where does it say that a failover group can only contain 2 nodes. It normally has all the nodes in the cluster

Cheers

Joe

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

jwolf — Tue, 12 Jan 2016 14:47:35 GMT

Hi and ,

Thanks for the info! This is exactly what I needed. This is a fantastic tool.

Cheers,

Josh

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

asulliva — Tue, 12 Jan 2016 01:26:44 GMT

Hello ,

It may, theoretically, be possible to not be an administrator, but you would need to check each of the NPTK commands used, cross reference that against the APIs used, then check against the permissions needed for that action.

That being said, there's a multitude of commands (like GetClusterRingResults) which use Invoke-NcSsh to execute commands at the diag level, which implies that an account with significant privileges is being used.

Hope that helps.

Andrew

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Tue, 12 Jan 2016 01:19:32 GMT

Does section 6.8 in the below link help you?

http://www.netapp.com/us/media/tr-4475.pdf

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

jwolf — Mon, 11 Jan 2016 23:24:42 GMT

Can anyone confirm if a cluster administrator is required to run the commands? I'm hoping this can work with a read-only account. I understand PowerShell must be launched with a Windows adminstrator account, but I'm curious if the cluster account can be read-only.

Thanks,

Josh

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

brandon_lee — Thu, 07 Jan 2016 16:24:26 GMT

Perfect Thank you!

-RunSection SAN is what we were looking for.

"Verify that each host is configured with the correct number of direct and indirect paths, and that each host is connected to the correct LIFs"

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Thu, 07 Jan 2016 16:00:16 GMT

Thanks for the input Brandon. These sections require a comma separated list of sections you want to run or skip accordingly. The current full list of sections is seen in one of the examples in the help output, I'm also including it here too:

Model
ONTAPVersion
Snapshot
Sysstat
SQLorHyperV1
SQLorHyperV2
Failover
HA
Nodes
RDB
Quorum
Disks
Aggregates
Volumes
Space1
Space2
Network
MTU
SAN
Time
Jobs
UNIX
Netgroup
Guarantee
Firewall
HomePort
Rebalance
FlexCache
LoadSharing
32BitFull
32BitAggr
32BitSnap
SVMRunning
InfiniteVolume
ExternalServer
ExportRule1
ExportRule2
UpgradeCautions
RouteCheck
VMAlignCheck
LUNHungCheck

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

brandon_lee — Thu, 07 Jan 2016 15:25:28 GMT

Hello all,

Having an issue with the -RunSection & -SkipSection flags for the script.

Using the -RunSection 17 flag, the script runs without any Section output.

Using the -SkipSection 17 flag, the script runs with EVERY section output, including 17.

Anyone run into this too, and have any input on it?

Thanks!!

-Brandon

Re: How to use the RBAC User Creator for Data ONTAP

CSCOTTENO — Tue, 05 Jan 2016 01:36:12 GMT

Hi,

In working with the SRA for SRM roles, I found that on 8.3.1P2 clusters "lun mapped show" errors as an invalid command. I changed it to "lun mapping show" and it worked.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

HoonChang — Thu, 17 Dec 2015 12:42:36 GMT

Hi ssikorsk,

I sent you a message. Hope it helps.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

ssikorsk — Thu, 17 Dec 2015 01:14:33 GMT

Hello,

This script is very helpful. Thanks!

I'm trying to make sense of why the errors are being triggered below. I don't see any of these errors being discussed in the networking consideration article:

https://library.netapp.com/ecmdocs/ECMP12458273/html/GUID-EFDA729F-AA1D-45D9-9CCC-D47E2C40D316.html

***** Error Found *****
SVM1 LIF does not have a home node that matches the first node to be upgraded of NODEA

***** Error Found *****
SVM1 LIF does not have auto-revert enabled

Now checking failover group a0a-01
***** Error Found *****
The failover group must contain exactly 2 nodes and a0a-01 contains NODEA NODEB NODEC NODED

Thanks.

Re: How to use the RBAC User Creator for Data ONTAP

GLENYU5820 — Wed, 02 Dec 2015 22:55:25 GMT

Works great to creat an user for cDOT v8.3.1P1 + VSC v6.1

Thank you!

Re: How to use the RBAC User Creator for Data ONTAP

JD — Tue, 01 Dec 2015 08:14:49 GMT

Hello dbkelly.

I did use the tool for our "special" case 7-mode with VSC 6.1 and sv-smvi 3.0.3 . I did discovered that specially for sv-smvi there are seven capabilities missing:

api-volume-list-info
api-snapvault-primary-relationship-status-list-iter-start
api-snapvault-primary-relationship-status-list-iter-next
api-snapvault-primary-relationship-status-list-iter-end
api-snapvault-secondary-initiate-incremental-transfer
api-snapvault-secondary-get-relationship-status
api-snapvault-secondary-snapshot-schedule-list-info

Could be it will be a good thing to add this to the config, as a separated SV-SMVI Role.

I'm not sure but I think it affect also the Verion 6.0.

Re: SnapVault for SMVI 3.0 (SV-SMVI)

JD — Tue, 01 Dec 2015 08:05:21 GMT

Hello JOHNSONDK,

yes it is working, we have four systems with this and I did migrate it to 6.1 by completely new installation, because the config was not critical for us.(a upgrade way should be desribed in the documentation fir the VSC)

On the end we did discovered some missed capabilities but you will see everything in the eventlog of the VSC-SMVI/SV-SMVI hosts.

I did use for the role configuration RBAC tool, this one support the VSC 6.1 already. !Important! -> It do not cover the required capabilities for sv-smvi tool!

This are the capabilities wich I did discovered for SV-SMVI:

api-volume-list-info
api-snapvault-primary-relationship-status-list-iter-start
api-snapvault-primary-relationship-status-list-iter-next
api-snapvault-primary-relationship-status-list-iter-end
api-snapvault-secondary-initiate-incremental-transfer
api-snapvault-secondary-get-relationship-status
api-snapvault-secondary-snapshot-schedule-list-info

Basically I did assigned to the VSC-Account all VSC 6.1 Required capabilities. But finally this seven capabilities are the missing part to get it to working.

We have 7-mode Systems with 8.2.1P3, vCenter 5.5U2e

Re: SnapVault for SMVI 3.0 (SV-SMVI)

JOHNSONDK — Thu, 26 Nov 2015 09:35:19 GMT

Are anyone using this script with web based versions of VSC (5.x and 6.x), and is this possible..?

Best regards

Johnny

Re: Validate-LIF-Config

mcgue — Tue, 27 Oct 2015 21:48:20 GMT

For 8.3 try this for the failover section.

$FailoverGroupFull = Get-NcNetFailoverGroup | Select Targets,FailoverGroup | Where-Object {$_.FailoverGroup -eq $fpgroup}
ForEach ($FailoverTarget in $FailoverGroupFull.Targets) {
$FailoverTarget = $FailoverTarget -split ":"
$FailoverTargetNode = $FailoverTarget[0]
$FailoverTargetPort = $FailoverTarget[1]
if (-not $pg.ContainsKey($FailoverTargetNode)) {
$pg.Add($FailoverTargetNode,@($FailoverTargetPort))
} else {
$pg[$FailoverTargetNode] += $FailoverTargetPort
}
}

Re: Validate-LIF-Config

JamesH — Tue, 27 Oct 2015 21:37:58 GMT

What about for 7 mode.........

jeremy_haynes12 have you had any luck with running in 8.3?

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

mcgue — Fri, 16 Oct 2015 00:26:01 GMT

smdonnell,

I sent you a private message in the forum if you would please check. Will post the fix once we verify too.

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

smcdonnell — Fri, 16 Oct 2015 00:16:14 GMT

Mcgue

Just ran your new updated SCript. and Now I have a new error, see Below:

Now checking subnet 10.100.210.0/24
This subnet is in use by a single port
Port a0a-3010 on node somenode-01 has an MTU value of 9000
***** Error Found *****
Subnet 10.100.210.0/24 contains port a0a-3010 on node somenode-01 has an MTU value of 9000 which has a MTU of 9000 and does not match at least one other port in the subnet
Port a0a-3010 on node somenode-02 has an MTU value of 9000
***** Error Found *****
Subnet 10.100.210.0/24 contains port a0a-3010 on node somenode-02 has an MTU value of 9000 which has a MTU of 9000 and does not match at least one other port in the subnet

I ran a network port show, as per the KB you reference, but all the MTUs are the correct! The Error message even says its both 9000.

Is there something else I can check or is a bug...

thanks again for the amazing Script!!

Re: How to Check Data ONTAP 8.3.1 Upgrade Requirements Using a PowerShell Script

brandon_lee — Thu, 15 Oct 2015 15:02:49 GMT

UPDATE**

I was able to clear a path for the script to run. The 'NetAppDocs-Lite' module was also removed from the 'installed programs' page. This didnt change the script issue... yet. Not until searching 'computer' for 'NetAppDocs-Lite' there was found to be a folder in the C:\Windows\System32\WindowsPowerShell\v1.0\Modules\ location. After this folder was deleted, the script began to run as expected. NOTE: there is NO 'NetAppDocs-Lite' entry in C:\Windows\System32\WindowsPowerShell\v1.0\Modules\ ...... seems so obvious now! 😉

Big thanks to mcgue for assisting with this issue!!

-B

Re: How to Check Data ONTAP 8.3 Upgrade Requirements Using a PowerShell Script

brandon_lee — Mon, 12 Oct 2015 21:25:00 GMT

The script is now loaded, took a few tries...... So now when I run the script it gives me only one error. The NetApp PowerShell toolbox download from the 'toolchest' has 4.0.0 as the only option. I worked with our RSE to get a link to the 3.2.1 version, however it redirects to the 4.0.0 download. Getting closer?

Re: How to Check Data ONTAP 8.3 Upgrade Requirements Using a PowerShell Script

mcgue — Mon, 12 Oct 2015 19:58:36 GMT

Brandon,

Thanks for the screenshot. The issue you are facing is about how the file is saved. Sometimes the browser will replace the escape character with these unknown characters. Try saving the script file different ways from this page. Try a right click save as. Or open it and copy the entire contents into a text editor or ISE and save it. Let me know how that goes.

Re: How to Check Data ONTAP 8.3 Upgrade Requirements Using a PowerShell Script

brandon_lee — Mon, 12 Oct 2015 16:07:57 GMT

Hello,

First off, thank you for this script, it will be very valuable to have this information prior to upgrading our customer!

At the moment, I am looking for another set of eyes to see what I am missing. I have gone through the instructions one at a time through the beginning of step 3. The script will run but the screen only posts red output and the output file has not been generated. Attached is the screenshot from the first atempt. The second attempt was with only the .\83UpgradeCheck.ps1 An attempt was also made to access the 'HELP' get-help .\83UpgradeCheck.ps1 -full , the screenshot for this is also attached below. Any direction is much appreciated!!

-Brandon

Re: How to use the RBAC User Creator for Data ONTAP

dbkelly — Mon, 12 Oct 2015 13:10:37 GMT

Support for VSC 6.1 has been added. Please note, you must download the latest ontapPrivs.xml.txt file (renaming it to *.xml) from the first post, and replace the one installed by the tool.

Re: RBAC User Creator for Data ONTAP

gmilazzoitag — Thu, 08 Oct 2015 13:01:51 GMT

Hi dbkelly.

Maybe I've explained not well.

The user I must use is perfectly equivalente to "admin". It has been created to avoid to share the admin password.

With that I can do everything on cluster and nodes. I understand that this tool has been created to be used by storage admins group and people but there are environment where the admin object must be impersonate to other real users. It's simply a name issue