All board posts in AFF, NVMe, EF-Series, and SolidFire

Re: Netapp EF600 with ESXi 7.01 dead path

hmoubara — Thu, 08 Jul 2021 06:36:27 GMT

Hello,

You cannot change the volume block size, you will have to recreate the volume. check the documentation below:

https://docs.netapp.com/ess-11/topic/com.netapp.doc.ssm-sam-117/GUID-0B472A89-B63E-4963-8DD1-75C947B9F09D.html

Thanks

Re: HCI IPMI Weak MAC Algorithms

ddansf — Wed, 07 Jul 2021 15:39:20 GMT

Please open a support case with the details and support can investigate current state for you.

Re: HCI IPMI Weak MAC Algorithms

pedro_rocha — Wed, 07 Jul 2021 14:25:08 GMT

Hello,

I found this bug: https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=424122

From there:

" Certain versions of security scanners might report one or more of the CVEs
listed in the Notes section as vulnerabilities present in the product.
NetApp has assessed the product and determined that it is vulnerable but
that an attack attempt has a low probability of success. Each failure will
cause a connection termination with a fatal error and an attacker would be
required to launch thousands of connection-killing attempts before achieving
a successful result.

This CVE has a CVSS v2 Base Score of 2.6 (LOW) (AV:N/AC:H/Au:N/C:P/I:N/A:N)."

There is not workaround and the bug is related to 7-mode systems (which I do not know if it is your case).

Regards,

Pedro

HCI IPMI Weak MAC Algorithms

chinchillaking — Wed, 07 Jul 2021 09:08:52 GMT

Hello,

Nessus scan discover CVE-2008-5161 HCI IPMI Weak MAC Algorithms as below, I cannot found below solution from google or NetApp support portal, anyone advise?

71049 - SSH Weak MAC Algorithms Enabled
Synopsis
The remote SSH server is configured to allow MD5 and 96-bit MAC algorithms.
Description
The remote SSH server is configured to allow either MD5 or 96-bit MAC algorithms, both of which are
considered weak.
Note that this plugin only checks for the options of the SSH server, and it does not check for vulnerable software
versions.
Solution
Contact the vendor or consult product documentation to disable MD5 and 96-bit MAC algorithms.
Risk Factor
Low

Best regards,

Chung

Re: Moving data from SolidFire to AFF-A250

elementx — Wed, 30 Jun 2021 14:14:16 GMT

There isn't sufficient information (environment, allowed downtime, etc.) so I'll just say if these are connected to the same VMware cluster it's the same as in this answer below, just in the opposite direction

https://community.netapp.com/t5/AFF-NVMe-EF-Series-and-SolidFire-Discussions/Solidfire-cannot-provide-NFS/m-p/161389

Netapp EF600 with ESXi 7.01 dead path

peterkoran — Tue, 29 Jun 2021 11:35:00 GMT

Netapp EF600 connected with ESX 7.01 over fabric (Brocade G620) and Emulex LightPulse LPe32000 card.

Controllers and Namespaces are visible in ESX, but the "Path" status is "dead"

Emulex experts said because of volume block size is 4096. VMware support only 512

I've created a new volume group and volume with 512 block size, but ESX still show 4096 (ESX rebooted)

Any suggestion how to change volume block size on EF600 to 512?

Peter

Re: Moving data from SolidFire to AFF-A250

NetApp_AU — Fri, 25 Jun 2021 03:42:31 GMT

Hello,

SnapMirror can be used to copy data between Element and ONTAP systems. See this guide for more details.

Moving data from SolidFire to AFF-A250

Dous — Fri, 25 Jun 2021 02:00:00 GMT

I have been tasked with replacing a SOlidFire cluster with an AFF-A250. Looking for a methodology to move the data off the SolidFire and onto the new AFF-A250

Re: Poor performance on Dynamic home share

AdvUniMB8 — Sun, 20 Jun 2021 21:18:10 GMT

I recently had a similar case, there the cause was disabled OPLOCKS. These were deactivated on one share (slow) on Qtree level, and was active on the other share (fast). Maybe you could check this?

There was no difference on the LAN, but there was on the VPN.

Poor performance on Dynamic home share

Baiju625 — Fri, 18 Jun 2021 06:43:08 GMT

Hi Gents,

Newly installed A250 takes 1+ minute to open a 5Mb word file from a home share which is configured as a dynamic share (%w$) over VPN. Same file when copied to a standard CIFS share (not a Dynamic home share) it open in 15 seconds. It is same SVM in both scenario and the latency is not coming from volume or disk from perf analysis. With and with out AV scan tested, no difference. Fploicy we are not using. Any clues where to to troubleshoot this issue? please advise.

Re: Space Savings Estimation - Incorrect Path Specified

PG_Edge — Mon, 14 Jun 2021 15:56:27 GMT

Did you find any solution for this? I am getting same error.

Re: Official datasheet: X1151A Datasheet

NetApp_RZ — Tue, 08 Jun 2021 05:39:32 GMT

The only information I have found that is close to a datasheet is in Agile.

That info is internal use only so someone above my pay grade would have to decide if the information could be released to the customer.

Re: Official datasheet: X1151A Datasheet

aborzenkov — Mon, 07 Jun 2021 12:47:53 GMT

wrote:
if I have access to it as a partner.

Do you? I tried to find anything about this card (as a partner) on support portal. I found nothing. In the past there were separate documentation sections for add-on cards (HBA and network). There is nothing now. Not only for this card, but for any other.

Re: Official datasheet: X1151A Datasheet

TMAC_CTG — Mon, 07 Jun 2021 12:44:22 GMT

Talk with your local Netapp sales team. They would have to be the ones to Share that information

i suspect if I have access to it as a partner I’m not allowed to share.

Official datasheet: X1151A Datasheet

Sandro_Cosenza — Mon, 07 Jun 2021 12:15:47 GMT

Thanks for the answer.

But my problem is: without an official datasheet, I cannot codify the card into Alstom internal database, named "CLAMP". (Alstom is the company where I work).

In the NetApp Universe, I can find the card but I cannot find an official datasheet: I can find photos of X1151A that look like photos made by a child with his smartphone. In every case, if I try to export anything, I get anonymous PDF or XLS documents, that are not official datasheets (they are without any stamp, copyright, etc. of NetApp)

So, I cannot codify anything about X1151A, so I cannot order it...

Can someone help me with an official NetApp datasheet? For me, it's OK photos of official papers included into the box of the card, too...

Thks & regards

Sandro Cosenza

Re: X1151A Datasheet

TMAC_CTG — Mon, 07 Jun 2021 11:20:10 GMT

What’s there to know besides

our enhances efficiencies as an offload card on certain AFF platforms
it is used as the dedicated cluster network card when using 100g (or 40g if you must)
Only the 10Gb cards are allowed in slot 2 right above it
it is always part of those certain AFF platforms and cannot be removed
it cannot be used on a FAS

X1151A Datasheet

Sandro_Cosenza — Mon, 07 Jun 2021 08:45:11 GMT

Hi All.

Someone can tell me where or how to find an official datasheet of the PCIe card X1151A (111-04635: NIC,100GbE, PCIe gen3 x16, Smart IO) for AFF A400?

Thanks & regards

Sandro

Re: HCI support matrix

elementx — Fri, 04 Jun 2021 04:33:44 GMT

Meanwhile 7.0U2 is also listed as supported and I understand this also covers minor (patch level) security updates to 7.0U2.

https://mysupport.netapp.com/matrix/imt.jsp?components=100296;99423;&solution=1737&isHWU&src=IMT

Re: AFF400 NVME

bobby1977 — Wed, 02 Jun 2021 09:23:41 GMT

Hi All,

Thanks for the support. I was able to implement NvME over FC successfully. The only problem customer can't use snapcenter since it is not supported over NvME.For sanpcenter backup they have to use FC

Re: Disk encrypt revert_original from maintenance mode responds with a root volume error

andris — Thu, 20 May 2021 15:12:29 GMT

You might want to get official guidance via a technical case.

That said, this message is informative -- "no usable root volume found".

You probably need to have one NSE spare disk that isn't locked to create a 1-disk temporary root on it -- before you attempt the "revert_original" command.

Disk encrypt revert_original from maintenance mode responds with a root volume error

Mattponca — Wed, 19 May 2021 15:47:30 GMT

I had posted a few months ago about a circumstance that required reverting SEDs to their factory state in maintenance mode:

https://community.netapp.com/t5/AFF-NVMe-EF-Series-and-SolidFire-Discussions/Revert-SED-to-manufacturer-s-state-from-maintenance-mode/m-p/164196

I've recently had the opportunity to try it out, and I receive a "no usable root volume found" upon execution of the disk encrypt revert_original command in maintenance mode, and the disks remain in a failed state-- subsequent "disk unfail" commands also have no effect. Although I fully expect there not to be a root volume in place and realize there's truth to the message, I would expect that I would have unfailed disks after both of the commands I used were issued.

Is there another step I'm missing here?

Re: Is it possible to return a netapp bought in error?

Drew_C — Tue, 18 May 2021 18:01:58 GMT

Hello So Le,

I don't think anyone on the community is going to be able to assist you with this issue. Your best bet is to work with your NetApp account or sales team directly, escalating as needed.

Re: Is it possible to return a netapp bought in error?

SpindleNinja — Mon, 17 May 2021 15:23:03 GMT

In my years as a Customer to Partner to NetApp, I've not heard of anyone returning anything.

What's the context of how this was accidentally bought?

Is it possible to return a netapp bought in error?

Sole74 — Mon, 17 May 2021 08:49:21 GMT

Hello @all!

I know that this is a forum and not a first aid station, but I don't know what to do next and maybe someone knows someone who knows who ...

Has ANYONE here had this problem before and know who to turn to?
From Netapp I only got the succinct information that this would not be possible .... "no return policy" or something like that.
I am more than desperate ...
There is also the possibility of a credit ... another customer of mine buys one more often, but with a larger size ...

I ordered this in error and Netapp told me, that is my problem now and they can't help...

Please help .... you are my last hope ....: - /

Best regards, So Le

Re: RAID Controller

TMAC_CTG — Fri, 14 May 2021 10:25:06 GMT

NetApp has always used software raid.

NetApp is the only company where the file system and RAID and the operating system were designed where they all know about one another from the very beginning. Raid wasn’t an afterthought, it wasn’t “bolted” on like other players

The design makes the difference

Re: RAID Controller

akiendl — Fri, 14 May 2021 05:25:42 GMT

ONTAP uses software RAID and all logic for it is within ONTAP.

ak.

RAID Controller

DHAKSHINAMOORTHY_B — Fri, 14 May 2021 05:06:40 GMT

Hi Team,

Whether NetApp FAS, AFF, ASA uses Hardware Based RAID controllers? or it is handled by ONTAP itself?

Re: HCI vulnerability

elementx — Sat, 01 May 2021 06:49:49 GMT

Oftentimes such scans are just "security spam" and report all sorts of things. Many a time it's completely irrelevant to our use case because we don't run eCommerce portals but API services for admins and vCenter/K8s.

For example, let's take a look at the first two CVEs:

1) CVE-2019-11068 - libxslt - I don't see how any of that applies to NetApp HCI or SF environments. "xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequently loaded". Users are administrators. If someone could show me how one admin with limited permissions can become another admin, I'd be interested. Otherwise, I don't see how this matters.

2) CVE-2019-14287 - sudo vulnerability. First, there are no users on mNode (or SolidFire nodes) except admins, so there's no harm in a sudoer becoming root. Second, the vulnerability - as per example exploit in the CVE - doesn't do anything (see below). Third, you can become root by simply switching to root - the only user there is (admin) is supposed to be able to become root.

Yes, you can limit IP access and NetApp HCI at least recommends to put mNode on a Management VLAN when deploying, so that only admins can access mNode in the first place. If your Mgmt node was on own LAN, exposed only to selected admins and vCenter, for example, it wouldn't get scanned in the first place.

But many users don't do that because it's "inconvenient", so vCenter, SolidFire MIP(s) and mNode MIP are all made accessible to VM Network.

If you haven't done that, you can move mNode to another network, although that may not be possible without reinstalling it (or reconfiguring, but there are no KBs for that as far as I know), or use other approaches such as iptables on mNode.

Because of Docker, there's a lot of rules already configured, so you'd have to be careful to just add additional rules that drop access to HCC/mNode management IP/port to all, and allow it to IPs that need access (which could be a handful, depending who and what needs access to that IP). These rules may need to be redeployed after mNode VM is redeployed or upgraded.

Another way is to install a secure proxy and allow access to mNode only to that proxy IP, and deal with access control on the proxy.

mnode ~ # iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ufw-before-logging-input all -- anywhere anywhere
ufw-before-input all -- anywhere anywhere
ufw-after-input all -- anywhere anywhere
ufw-after-logging-input all -- anywhere anywhere
ufw-reject-input all -- anywhere anywhere
ufw-track-input all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
DOCKER-USER all -- anywhere anywhere
DOCKER-INGRESS all -- anywhere anywhere
DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED
DOCKER all -- anywhere anywhere
ACCEPT all -- anywhere anywhere

[...]

Re: HCI vulnerability

kryan — Wed, 28 Apr 2021 18:51:56 GMT

Hello,

Mitigations (fixes or workarounds) are expected for all affected Full Support products. Advisories are updated with first fixed releases when they become available for use.

I am unsure if it is possible to configure the firewall on the management node - I'd recommend a support case to confirm.

HCI vulnerability

chinchillaking — Wed, 28 Apr 2021 09:45:11 GMT

Hello,

After use Nessus scan HCI 1.8P1 and discover below vulnerability, but the "Remediation" did not mention fix the issue. Could HCI 1.9 fix below vulnerability? If did not patch fix, could management node setup firewall ACL allow dedicate hosts access?

https://security.netapp.com/advisory/ntap-20191017-0001/
CVE-2019-11068

https://security.netapp.com/advisory/
CVE-2019-14287

CVE-2020-10029

CVE-2020-26116

CVE-2021-3156

CVE-2019-5094

CVE-2020-13817

CVE-2020-15025

CVE-2020-1971

CVE-2020-1752

CVE-2021-3156

Best regards,

Chung

Re: HCI support matrix

elementx — Tue, 27 Apr 2021 11:26:02 GMT

> Version vCenter 7.0 u1

That would include all minor 7.0u1 releases as well, as far as I understand.

Of course customer is welcome to contact support to verify.

Re: HCI support matrix

Fabian1993 — Tue, 27 Apr 2021 10:10:45 GMT

The newest Version for the VCP is 4.7, but this Plugin is also only supported to Version vCenter 7.0 u1

You can check the newest Version here:

https://library.netapp.com/ecm/ecm_download_file/ECMLP2876748

https://docs.netapp.com/us-en/hci/docs/rn_whatsnew.html#netapp-hci-1-9

HCI support matrix

chinchillaking — Tue, 27 Apr 2021 02:06:13 GMT

Hello,

As check with NetApp support matrix, HCI 1.8P1 support ESXi 7.0U1. Due to VMware vulnerabilities issue, anyone could help below question?

- require upgrade to 7.0U1c but NetApp support matrix did not mention, will HCI 1.8P1 support?

- VMware Element vCenter Plugin is 4.6.1, will it support vCenter 7.0U1c or vCenter 7.0U1d?

Best regards,

Chung

Re: Oracle 18/19 ASM disks migration between NetApp Clusters on >9.7 on Windows and Linux systems

steiner — Fri, 23 Apr 2021 14:23:13 GMT

Most DBA's just use ASM's native ability. They make the new LUNs of equivalent size, add them to the current diskgroup, and then start dropping the old LUNs. Once the rebalance is complete, disconnect the old LUNs.

If any of those LUNs manage grid services, you may need to run an additional command or two.

Oracle 18/19 ASM disks migration between NetApp Clusters on >9.7 on Windows and Linux systems

storageguy — Fri, 23 Apr 2021 02:36:31 GMT

Dear Community,

Looking for steps to migrate ASM disk group from one cluster to another cluster. Both AFF clusters. We have ASM on Windows and Linux systems.

Thanks in advance.

Re: SED Drives drive-protection-enabled flag reporting incorrectly

aladd — Tue, 20 Apr 2021 08:53:57 GMT

I would suggest registering a case so that it can be tracked, as the bug is relatively new.

Re: SED Drives drive-protection-enabled flag reporting incorrectly

amayacitta — Tue, 20 Apr 2021 08:29:40 GMT

When we run 'storage encryption disk show' the disk has its non-default data-key-id and is in mode 'data', as such we know the disk itself is encrypted fine, as the root aggregate also shows drive-protection-enabled as true.

It very much matches the output issue as per that BURT, ideally it needs tagging for 9.8P2 as well as it effects us on that version as well as the ones currently listed.

Re: SED Drives drive-protection-enabled flag reporting incorrectly

aladd — Tue, 20 Apr 2021 06:04:12 GMT

When you check the "storage encryption disk show -container-id <ID>" do you get the correct response from this output?

SED Drives drive-protection-enabled flag reporting incorrectly

amayacitta — Mon, 19 Apr 2021 13:49:40 GMT

Hi guys,

Did anyone else notice this also applying to 9.8P2?

https://mysupport.netapp.com/site/bugs-online/product/ONTAP/BURT/1385348

When I run "storage aggregate show -aggregate * -fields encrypt-with-aggr-key,drive-protection-enabled" it lists the root aggregate for the SED disks as true for drive-protection-enabled and the data aggregates as false. Got myself in a pickle trying to work it out, then found the above bug. It could do with being tagged for 9.8P2 as well.

Re: HCI change DNS

Fabian1993 — Thu, 15 Apr 2021 06:53:32 GMT

For the Compute Part you use the normally VMware doing.

for the mNode you have to check this:

https://docs.netapp.com/us-en/hci/docs/task_mnode_settings.html#update-management-node-network-settings

For the Storage Nodes, go on each Node Management IP:442 and change the DNS Server, on the newest Version you will redirect to the HCC and can change this also.

HCI change DNS

chinchillaking — Thu, 15 Apr 2021 03:55:20 GMT

Hello,

We can found NetApp KB and how to change HCI NTP, but cannot found KB or manual how to change DNS, could HCI change DNS?

Best regards,

Chung

Re: NetApp X1975A-R6 2Tb Flash Cache Module PCIE vt

maffo — Sun, 11 Apr 2021 17:15:35 GMT

Once you install it in a compatible NetApp controller, it will show up as cache memory rather than permanent storage.

The card is not compatible with Windows or other operating systems besides Data ONTAP/ONTAP, nor can be used outside of a FAS controller.

NetApp X1975A-R6 2Tb Flash Cache Module PCIE vt

DrPepper — Sun, 11 Apr 2021 05:20:25 GMT

I bought a NetApp X1975A-R6 2Tb Flash Cache Module PCIE VT but I'm kinda confused on how to use it none of my motherboards show it as storage but windows just sees it as a pcie device with no drivers. Could anyone help me with how to set it up

Re: E2760 How do you get into the CLI serial port using putty.

ExactLabSysAdmin — Fri, 09 Apr 2021 07:34:56 GMT

Hi Scott_G,

I guess you used a mini-usb to rs232 cable. Can you share the cable part-number?

And how did you get into the Service level CLI?

Thanks.

Re: Nutanix HCI vs NetApp AFF

elementx — Fri, 09 Apr 2021 06:22:48 GMT

And you're asking for this in public forums because ...

Nutanix HCI vs NetApp AFF

JBlackwell — Thu, 08 Apr 2021 00:07:08 GMT

Hi Team,

I've searched Field Portal and have only found HCI vs HCI documents.

Do we have a Nutanix HCI vs NetApp AFF Battle Card?

Thanks,

Jeff Blackwell

Re: Hci deployment issue

NetApp_AU — Wed, 07 Apr 2021 06:23:03 GMT

Hello Mrfall, do you mind sharing a screenshot of the page with the fields filled out? For security, it would be a good idea to blur out the values themselves for IPs and such.

Hci deployment issue

Mrfall — Sat, 03 Apr 2021 07:56:49 GMT

After i fix jumb frames issue and gateway invalid issue. Today i got another weird thing. After i go to network settings, i put the IP address after validated and make green check. Continue icon become grey out. I couldn’t continue deployment. Any thoughts

Re: Net-APP HCI Jumbo Frames

elementx — Fri, 02 Apr 2021 14:17:10 GMT

Okay, then.

MTU 9000 is definitively preferred to smaller MTU, good to hear that was sorted out.

Re: Net-APP HCI Jumbo Frames

Mrfall — Fri, 02 Apr 2021 14:06:40 GMT

I really appreciate your help and thoughts.

for jumbo frame, I get jumbo frame setup by changing from dhcp to static and jumbo frame working fine now.

for the gateway invalid I found there is a bug on NDE 1.80.25 and you have to use d-patch to solve this error and i got it solved.

You can see this article for the issue

https://kb.netapp.com/Advice_and_Troubleshooting/Hybrid_Cloud_Infrastructure/NetApp_HCI/%22The_gateway_is_not_valid%22_during_NDE

Re: Net-APP HCI Jumbo Frames

elementx — Fri, 02 Apr 2021 13:56:36 GMT

It is tricky to change MTU to a smaller value because that means all nodes can't send non-fragmented packets to the node that changes to a smaller MTU, and especially with SolidFire (or clusters in general) by doing that you essentially take a node's interface down and with it put the node out of service (iSCSI interface)

On top of that there's also VMware which is configured to use MTU 9000 so once you change SF to 1500 your ESXi and VMs and vCenter will drop.

There are several articles about this in the KB

https://kb.netapp.com/Special:Search?query=change+mtu+hci&type=wiki

It's best to read them, create a plan and check with Support if the steps are OK, then do it during scheduled downtime.

> The default Gateway "The gateway is not valid." For the MGMT network on compute

Maybe your gateway isn't pingable or is on a different (unreachable) VLAN.

Depending on VMware vSwitch configuration and one of several approaches to networking (VDS/VSS, 2 cable, 4 cable, all Host Tagged VLANs, or some Host Tagged VLANs), there are different problems that people run into.

You'd have to describe which approach you took and how you configured your network for it, etc.

Re: Net-APP HCI Jumbo Frames

Mrfall — Wed, 31 Mar 2021 07:35:46 GMT

Also I have Issue With Network Settings

The default Gateway "The gateway is not valid." For the MGMT network on compute

I am using NDE 1.8

Net-APP HCI Jumbo Frames

Mrfall — Wed, 31 Mar 2021 00:40:50 GMT

Hello Folks!

I am trying to change the MTU on Storage And Compute but one of the nodes doens't like to change the MTU to 9000 I tried many times.. I also I restart the Nodes. Is any way get this work Done ?

Re: AFF 250 / 25Gb switch / small core

andris — Thu, 25 Mar 2021 17:08:33 GMT

As stated, we don't have any formal switch recommendations for data-side networking. You can pick your poison: Mellanox/Nvidia, Broadcom, Cisco, Juniper, Arista, etc.

I'd personally stick with enterprise-class switches with good management capabilities.

Re: Net App Hci installation

elementx — Thu, 25 Mar 2021 05:54:45 GMT

> All nodes using 1.8 even the Firmware is Different.

NDE should work if all nodes have the same version, but if you have time you can check if it's 1.8 or 1.8P1 and flush them remotely (and take care of firmware with HCC later).

To flush ISOs, download the ISOs to a nearby Win or Lin OS and update nodes via IPMI.

IPMI lets you mount local ISOs via IPMI Java KVM console (can be better for Windows, if you have RDP connection to Windows) and, if you use HTTP console, via SMB mounts (I like this for Linux, because you can create anonymously accessible SMB share for IPMI, which on Windows is almost impossible these days).

With Linux - if you can configure SMB share and put the ISOs on them - you don't need X-Windows, once SMB is configured you just mount the SMB share from IPMI (HTTPS) and can install. It's slow (10 MB/s) and you have to use one IPMI session at a time (they force others to log out, if you use the same browser) so it's sequential operation, one node at a time.

1.8P1 fixes some deployment edge cases, so you'd increase the chances of success at first try.

> I will deploy the Vcneters and the clusters then Apply the update by using HCC. the deployment will work because they are matching versions : 1.8.

Yes, if you get paste NDE and install, after that it's all HCC. At 3 minute mark here you can see how HCC works:

https://tv.netapp.com/detail/video/6211800219001/element-hci-hcc-solidfire-hcc---ui-driven-element-upgrades

Re: Net App Hci installation

Mrfall — Thu, 25 Mar 2021 05:34:30 GMT

I really appreciate your Help. After i checked The Software versions on all Compute and Storage. All nodes using 1.8 even the Firmware is Different. So what i understand to Avoid lose the remote Access to nodes beacuse I do the work remotely. I will deploy the Vcneters and the clusters then Apply the update by using HCC. the deployment will work because they are matching versions : 1.8.

After Deployment i will upgrade to last 1.8P1 for last update

Thanks So much

Re: Net App Hci installation

elementx — Thu, 25 Mar 2021 02:08:33 GMT

If you power on either the storage or compute nodes and if there's DHCP on the RJ45 ports, you can go to https://${address} to see what NDE (deployment engine) version and ISO version is on each node.

In all likelihood for Storage Nodes, you'll very likely get NDE 1.8P1, which is the latest. NDE 1.8P1 will deploy vSphere 6.7U3 I think.

Compute: depends when you bought those. If you both them in the past 2-3 months they likely have very recent firmware but some updates may still be available (which, you can find in HCC change log). The ISO also can be downloaded, you could get the latest for 1.8P1.

In any case, the way to update is to deploy first, using NDE 1.8P1 and then run upgrade from HCC:

https://docs.netapp.com/us-en/hci/docs/task_hcc_upgrade_all.html

> My questions before I deploy I need to match Firmware on storage Nodes. How i can do that

To deploy you need to have all storage nodes on the same version of SolidFire/Element OS. That's usually the case but sometimes they can have different versions.

You'd see (NDE would stop telling you one or more nodes have a different version) when you begin deployment but to eliminate uncertainty you can download Storage Node ISO from Support pages and flush nodes regardless.

Or boot all storage and compute nodes (doesn't have to be at the same time) with RJ45 connected to a DHCP network and see if they're all the same version, and then decide if you need to get Compute & Storage node ISOs.

If you haven't started installing anything, just get the latest ISO version for both compute (> 15GB) and storage (< 5 GB) nodes and flush all respective nodes before you install with NDE. Then after the storage and VMware cluster is up and running, you can do one more refresh with HCC (it has more recent updates, anything that came after NDE 1.8P1).

Re: Net App Hci installation

Mrfall — Wed, 24 Mar 2021 19:02:39 GMT

Thanks for your reply. First of all i didn't deploy the cluster yet so i don't have vcenters or API to access.

The Firmware on two Storage nodes is : Firmware Revision : 03.25

Another Storgae nodes has Firmware version : Firmware Revision : 03.26

All the Compute has : Firmware Firmware Revision: 06.71.18

My questions before I deploy I need to match Firmware on storage Nodes. How i can do that

Thanks so Much for help

Re: Net App Hci installation

elementx — Wed, 24 Mar 2021 17:41:49 GMT

You don't say what's your current version and what version you want to get to, so we can only guess about that.

https://docs.netapp.com/us-en/hci/docs/concept_hci_upgrade_overview.html tells you how to do it in general: if you're on a vSphere 6.x (up to latest 6.7) you can update HCC.

Specific to firmware, there's a step (link) on this page https://docs.netapp.com/us-en/hci/docs/task_hcc_upgrade_all.html

I'd suggest to simply gather what you have now (vSphere, SolidFire, HCC version) and ask Support what to do next.

Net App Hci installation

Mrfall — Wed, 24 Mar 2021 15:58:49 GMT

Hello Folks!

i am close to deploy Net App HCI. We already had three compute H410c and four storage H410S. Before i deploy it, i need to upgrade the firmware to last version. Can you guide me to get this done.

Re: AFF 250 / 25Gb switch / small core

imadam — Wed, 24 Mar 2021 08:41:02 GMT

As far as cluster, AFF A250 will be configured as switchless cluster. I am talking about iSCSI traffic as well as other traffic on network.

Re: AFF 250 / 25Gb switch / small core

Mjizzini — Wed, 24 Mar 2021 02:01:15 GMT

If you are referring to the SN2010/25gb cluster switches. The cluster network should not be mixed with data network. It should be running a privet cluster network only.

If you are referring for data access switches, this will be outside NetApp recommendation.

AFF 250 / 25Gb switch / small core

imadam — Tue, 23 Mar 2021 15:45:06 GMT

Hi,

customer with limited budget is looking to get AFF 250 with 25GbE. They are also planning to use these 25GbE switches for consolidating small network in terms providing connectivity for access switches. Is this something people do and what would be recommendation for a switch? I was looking at Mellanox:
https://www.mellanox.com/sites/default/files/doc-2020/pb-sn2010.pdf

Any recommendations? Suggestions?

Re: AFF400 NVME

tahmad — Tue, 16 Mar 2021 09:10:08 GMT

Was your issue resolved?

Re: AFF A250 Stencil

amayacitta — Thu, 11 Mar 2021 12:40:06 GMT

Seems it is included in the NetApp-AFF-Series.vssx, i just also had the older NetApp-AFF-Series.vss 2010 template file in there and for some reason Visio was defaulting to the old vss not newer vssx.. case closed!

Cheers.

Re: AFF A250 Stencil

amayacitta — Thu, 11 Mar 2021 12:34:35 GMT

Strange, the A250 is AFF not E-Series.. just downloaded the latest E-Series shapes anyway but the A250 isnt included?

Re: AFF A250 Stencil

Mjizzini — Thu, 11 Mar 2021 12:21:12 GMT

Was not able to find the requested doc.

From VisioCafeThe latest update 21-Oct-2020 (NetApp-E-Series.vss - Added AFF-A250 and associated) components

More about AFF A250.

AFF A250 Systems Installation and Setup Instructions

DATASHEET NetApp AFF A-Series

http://www.visiocafe.com/netapp.htm

AFF A250 Stencil

amayacitta — Thu, 11 Mar 2021 11:27:16 GMT

I see there is no Visio stencil update for this model on Viso cafe yet, does anyone internal have a copy? I'm building out a design for a customer meeting next week.

Re: Snapshot Reserves Best Practice

PDLymperis — Thu, 11 Mar 2021 07:38:06 GMT

Thank you for your response.
I am not using the new experience.
I think that it is a GUI issue but as you can understand the red color creates considerations at some users.
Let’s see what NetApp will say.

Re: Snapshot Reserves Best Practice

pedro_rocha — Wed, 10 Mar 2021 21:49:25 GMT

AFAIK this practice did not change.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/What_is_the_proper_configuration_for_a_volume_containing_a_LUN%3F

Could be some new behavior on System Manager GUI. Are you using the "new" experience? It has some caveats and "strange" things to those who work with NetApp products for some time...

Luckly some NetApp guy could check with the GUI guy what is this...

Snapshot Reserves Best Practice

PDLymperis — Wed, 10 Mar 2021 12:31:21 GMT

Hello All,
I have a question on Snapshot Reserves %.

I have volumes with LUN’s and as far as I know the best practice is to keep it 0%.
On ONTAP 9.5P6 when I use the Volume Resize Wizard and set the Snapshot Reserve 0% no issue.
But on ONTAP 9.7P2 when I use the same Volume Resize Wizard and change the Reserve from 5% to 0% the GUI show the Reserve from yellow to Red.
The Volume is 10% bigger than the LUN.
The system is AFF220.
Has anything changed? Is it a GUI issue?
Any advice?
Thank you in advance.

Re: HCI hardening

ddansf — Fri, 26 Feb 2021 18:42:52 GMT

I created a KB based on this thread with and added a few additional links/resources:

Where is the HCI hardening guide located?

Lots of overlap between HCI and AFA deployments here -- the API-driven topics apply to both, for instance.

Re: Revert SED to manufacturer's state from maintenance mode

AlexDawson — Mon, 22 Feb 2021 01:27:42 GMT

Hi there!

In maintenance mode, the nodeshell command "disk encrypt revert_original" can be used, as detailed at https://library.netapp.com/ecmdocs/ECMP1636022/html/GUID-76C16F4E-7497-42D3-B22B-89E94279C1BF.html

Hopefully it doesn't come up again though 🙂

Revert SED to manufacturer's state from maintenance mode

Mattponca — Sat, 20 Feb 2021 16:15:52 GMT

Hello,

I've recently corrected an issue encountered on one of my user's AFF-A200 systems. The short of it is they exchanged an incorrect key with the AFF-A200 during system boot. This happened the prerequisite amount of times for the disks to be failed somewhat permanently. I was able to revert the disks to their original state by using the procedures listed here:

https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-930%2Fstorage__encryption__disk__revert-to-original-state.html

However, this procedure required me to insert the disks into an operational cluster in order to revert them (we were lucky enough to have one capable of reverting the disks). Is there a different procedure that can be performed to revert these disks without having a booted CDoT system? Perhaps from maintenance mode? I understand that loss of data in occurrences such as these is a by-product of exchanging the wrong key and I don't require a recovery of any data, just a factory reset of failed disks.

Re: NetAppHCI 1.8P1 NDE deployment (NTP time out error)

elementx — Thu, 18 Feb 2021 12:43:02 GMT

You can connect to another storage node and run NDE there.

NetAppHCI 1.8P1 NDE deployment (NTP time out error)

SHINSASA — Thu, 18 Feb 2021 07:22:03 GMT

Hi,

NTP time out error on NDE process.

How can we restart NDE?

Info:

We try to install NetAppHCI 1.8P1 by NDE.

RTFI usb boot and fresh installed.(Compute Node x2 , Storage Node x4)

no use DHCP server.

I set to Static IP address of 1G Management Port.(Compute Node and Storage Node)

I set to Static IP address of 1G Management Port and 10G port(Storage Node(no set 10G of Compute Node))

NDE install start.

But NTP time out error appered.

(NDE default NTP server(us.pool.ntp.com)can not resolve and reach)

So we re setting local AD(DNS/NTP) server(192.168.247.56).

But we can not restart NDE.

How can we restart NDE process?

https://kb.netapp.com/Advice_and_Troubleshooting/Hybrid_Cloud_Infrastructure/NetApp_HCI/NetApp_HCI_-_NDE_Scale_failed_due_to_NTP_Server_time_out

I find out this link.

And re-setting NTP server

Our sep support expired.

So we want to ask and get answer by community.

Best Regards,

Re: CIFS on 8040FAS Replacing with FAS2720

peiffer83 — Fri, 12 Feb 2021 13:30:17 GMT

Thank you all for the replies. It is as easy as I thought!

Re: CIFS on 8040FAS Replacing with FAS2720

TMAC_CTG — Wed, 10 Feb 2021 14:24:01 GMT

add the FAS2720 to the cluster
configure networking to best match original FAS8040 (port-channels, FC, etc)
Add ports from the FAS2720 to the current broadcast-domains
Vol move NFS/CIFS to FAS2720
For each NFS/CIFS lif on the FAS8040 (change the vserver, lifname, home-node and home-port)
1. net int modify -vserver xxx -lif xxx -home-node fas2720-xx -home-port xx)
Send the LIF to its new home
1. net int revert -vserver xxx -lif xxx
The SVM is global to the cluster. Shared databases take care of the info.
Depending on the number of FC LIFs per node, you may be able to:
1. Modify one FC LIF to down
2. Modify the FC to the new FAS2720
3. Modify one FC LIF to up -> it is now in a new location, no zoning needed 😉
4. Verify pathing comes back as expected
5. If needed, LUN move from the FAS8040 to the FAS2720
6. I do not know the full layout of your FC on your Cluster. I have done this with iSCSI and FC in the past.
  1. It requires having at least two LIFs on each node.
  2. You can relocate one LIF on each fabric leaving one per node
  3. After the move you did not need to zone anything and the LIFs stay the same

Re: CIFS on 8040FAS Replacing with FAS2720

SpindleNinja — Tue, 09 Feb 2021 19:51:01 GMT

Data SVMs are carried throughout the whole cluster, so when you add a pair of nodes, the SVM will be extended across them.

Once you've moved all the data over, and the lifts etc, you'll have to decom the ports and anything else that's tied in.

Here's the doc on removing nodes. Note the part about the master node.

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.dot-cm-sag/GUID-6731B7F7-0C48-4474-A67B-E1F1CCBA77A6.html

CIFS on 8040FAS Replacing with FAS2720

peiffer83 — Tue, 09 Feb 2021 19:42:03 GMT

Hello,

We have a 4 node cluster currently consisting of a FAS8040 and a AFF-A300.

The cluster has the following SVMs

Fiber Channel (All 4 nodes have access to this)

CIFS&NFS (Only the 2 8040 nodes have access to this data network (10GB) connections)

I am introducing a 2 node FAS2720 which will house all the CIFS data that the FAS8040 currently does. My question is what I have to do with the CIFS/NFS SVM in preparation for the removal of the 8040.

I have no problems and am very familiar with retiring a node with just fiber channel. In that case I add the new nodes FC data ports to the SVM, do the zoning in the fabric, and make sure all paths show up. Then I volume move the data over to the new nodes aggregates, make sure the lun mappings look good, and then remove the old nodes FC LIFS and remove it from the cluster.

This is what I think will happen for CIFS but I wanted guidance.

-I add the FAS2720 to the cluster

-I configure the 2720 ports for the 10GB network ports on the same VLAN as the current 8040.

-I volume move the CIFS/NFS volumes from the 8040 aggr->2720 aggr

-At this step the actual data access to the volumes is going through the 8040->cluster switches->2720

-After all volumes are migrated to the 2720, I move the CIFS/NFS LIFs from the 8040 -> 2720 network port that is on the same vlan as the 8040. There may be a loss of a ping or two which is fine.

-Now data access is going directly through the 2720 because the CIFS/NFS LIFS are hosted on a node in that 2720.

Since the CIFS/NFS SVM was setup on the 8040, do I have to do anything special with the 2720 for CIFS/NFS setup? This is where I have the questions.

Thank you

Re: snapmirror restore fails on AFF system because of compression on the destination volume

jcolonfzenpr — Wed, 03 Feb 2021 20:26:02 GMT

Check if this applies to you bug 1134281:

https://mysupport.netapp.com/site/bugs-online/product/ONTAP/BURT/1134281

A Storage Virtual Machine (Vserver) disaster recovery transfer operations might fail when modifying volume efficiency operations.

Fixed in versions:

For minimum recommended release, please visit 9.6P12, 9.7P10, 9.7P11, 9.8P1

Re: HCI account password policy

elementx — Fri, 29 Jan 2021 07:11:32 GMT

- In mNode TUI, you can set "admin" account for mNode. Of course, later you can login to shell and as sudoer change the root password for mNode. You can disable SSH service on this node using standard Linux commands.

- But in storage node you can only set local cluster admin account. Bootstrap OS (before SolidFire cluster is formed, also used to update firmware) boots from the first disk (Disk 0) and has its own root password (I don't know what it is), but once cluster is configured, you boot nodes to Disk 1 where SolidFire (Element OS) is installed and like with Bootstrap OS we don't have root access (or any shell access) to that OS. You can get to TUI (not a shell) with cluster admin password, but that's all. If/when remote support is required, you can enable Reverse SSH (whereby Cluster Manager or individual storage Node connects to NetApp Support who can perform reverse access and log with SSH). If you don't ever want to enable reverse SSH that's fine as well, then you'd use desktop screen sharing app and let NetApp support use your SSH client to login to nodes for troubleshooting.

In field we don't have root passwords for storage OS and there's no remote access to it, unless you enable it (reverse SSH tunnel only).

Re: HCI account password policy

chinchillaking — Fri, 29 Jan 2021 06:35:47 GMT

Hi Elementx,

The root account, it was "Textual User Interface (TUI)", could it change with complexity?

Best regards,

Chung

Re: E2760 How do you get into the CLI serial port using putty.

Scott_G — Thu, 28 Jan 2021 17:22:48 GMT

Thanks for the reply. Yes, 115200 is the baud rate. I was trying to get into the Service level CLI with is a key sequence when you login thru the serial port. I figured out. Thxs!

Re: HCI account password policy

elementx — Thu, 28 Jan 2021 15:54:17 GMT

console root account - I don't know if it's available to anyone in field. SSH service on storage cluster (reverse SSH tunnel to NetApp) can be enabled for NetApp Support, but generally SSH isn't available for remote access anyway.

cluster admin account - there's no lockout, but you can make the password very complex (e.g. 20 characters), and also you can eliminate the use of local cluster admin:

a) create a AD group, connect cluster to AD, add an admin group account as cluster admin, and then set vCenter plugin and other accounts to use that AD account.

b) block network access to cluster Management IP and VIP (normally it's blocked by default if you keep cluster management network on separate VLAN where only mNode and vCenter have access to, but if the case you have not implemented networking that way, then you could limit access to the IPs mNode, vCenter and perhaps 1-2 other hosts

IPMI ADMIN account - you can check in the IPMI UI (create a test account and try?), I don't remember this detail now (and there may be slight differences between different hardware models, e.g. H600 vs. H300 vs. H410, and IPMI f/w versions). As far as I know (I may be wrong), the only time IPMI admin account is used is when mNode/HCC upgrades BIOS and firmware, so if you don't have it on a secure network, you could probably enable this on demand (for f/w upgrades with HCC) and keep it disabled at other times.

HCI account password policy

chinchillaking — Thu, 28 Jan 2021 08:22:02 GMT

Hi All,

Due to security, may we know below account password policy? Refer root account, could change?

console root account

cluster admin account

IPMI ADMIN account

BTW, could change policy, e.g. complexity, length, history and lockout ..............?

Best regards,

Chung

Re: E2760 How do you get into the CLI serial port using putty.

pedro_rocha — Wed, 27 Jan 2021 22:39:25 GMT

Do you have an active support contract with NetApp?

"SSH is not a supported management protocol for E-Series devices. To manage the storage array, there is SANtricity for GUI based management or SMcli for the command line.

For support procedures, occasional Telnet or SSH access is required. However, it is not possible to use Telnet/SSH for day-to-day operations."

Nevertheless, I would try: default all and 115200 or 9600

Re: E2760 How do you get into the CLI serial port using putty.

Mulya — Wed, 27 Jan 2021 22:34:50 GMT

Hi ,

Assuming you are using putty in your laptop, please use the following

Connection type: Serial

Speed: 115200

Serial Line: your laptop COM port

Thank you,

Mulya

E2760 How do you get into the CLI serial port using putty.

Scott_G — Wed, 27 Jan 2021 17:22:26 GMT

Does anyone have the settings for putty for the serial connection and the key sequense to get into DIAGS to reinit the array?

Re: HCI hardening

elementx — Mon, 25 Jan 2021 11:35:52 GMT

https://www.netapp.com/media/21791-tr-4860.pdf < = this TR

You can also see PCI DSS (https://www.coalfire.com/insights/resources/white-papers/netapp-hci-verified-architecture-for-pci-dss) and https://www.netapp.com/media/17065-nva1143.pdf

Generally speaking, you can apply ESXi hardening from VMware, and for NetApp HCI there are 2 components:

a) Management Node (mNode and HCC that runs on it) - VM (which should be exposed to only vCenter).

b) NetApp HCI Storage (Management Interfaces) - Management IP of every storrage node, and one Management Virtual IP. These need to be exposed to vCenter (for management purposes) and possibly other hosts that live on Management Network (e.g. backup management system, if it needs to use SolidFire snapshots, for which it needs to talk to Management Virtual IP of storage).

Assuming mNode, HCC and vCenter can connect to ADS/LDAP, you could use AD/LDAP based account aliases or group aliases, to eliminate the use of local NetApp HCI cluster admin account, and manage password expiration and complexity via AD/LDAP. There's also MFA if you want/need that. You can also use KMIP to entrust encryption keys to external Key Manager (by default NetApp HCI cluster manages encryption keys used to encrypt SED disks).

I would definitively recommend to generate and upload own CA-generated TLS certificates to MVIP and mNode.

If you want to harden iSCSI (Storage Network) security, you can introduce more complex access (CHAP + VLAN + Access Groups), but that may require reconfiguration of your existing networks (which may be impossible without downtime, but this depends on your details and number of compute nodes - if you have just 2-3 and want to introduce new VLANs, you may need to schedule downtime to make significant changes to vSphere networking).

HCI hardening

chinchillaking — Mon, 25 Jan 2021 09:13:19 GMT

Hi All,

I can found OnTap and Santricity hardening guide, anyone know how could obtain HCI hardening guide? Thanks.

Best regards,

Chung

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

andris — Thu, 21 Jan 2021 18:42:39 GMT

The only way your assertion is true is if you have explicitly requested and obtained approval for a support extension product variation request (PVR). If you do not have a support extension PVR in place, do not expect to receive replacements for the drive when it passes its HW end-of-support (EOS) date. I would check with your NetApp sales representative/partner.

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

peiffer83 — Thu, 21 Jan 2021 00:15:46 GMT

Actually they will be covered. The array was sold with those drives originally with 6 years of support. We are still on those 6 years of support. I understand your argument but I have had this discussion with 450gb sas 15k drives which were end of support but they replaced them because the array has warranty. It depends, is the right answer. However from what I have seen is if the array was originally purchased with those drives, they are covered for the original duration of the warranty. Now when 2022 comes along. I will not be able to renew support on those drives but NetApp will not say oh well yeah we screwed up and sold you 6 years of support but are only going to cover the drives for 5.

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

CHRISMAKI — Wed, 20 Jan 2021 22:34:14 GMT

Sure looks right to me, and while the intent of the KB is to get you from whole drives to ADP I don't see why it wouldn't work going from ADP to ADP.

Your first response has one grave error in it however:

The drives the AFF8040 came with were the X439_S16351T6ATD. They are end of support on 10/31/2021 however our support on the array is good until 6/30/2022. That means Netapp will support the old drives.

This is not so, the support for your X439s will end on October 31, 2021 regardless of the support contract that exists on the controller. I highly recommend you get clarification here before it becomes a problem. I'm going through this with a bunch of my clients running 3TB drives right now.

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

peiffer83 — Wed, 20 Jan 2021 21:47:03 GMT

Is this the right document?

https://kb.netapp.com/Advice_and_Troubleshooting/Flash_Storage/AFF_Series/How_to_migrate_to_Advanced_Disk_Partitioning_(ADP)

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

peiffer83 — Wed, 20 Jan 2021 21:42:11 GMT

Hi that is exactly what I am thinking I should do. This was originally a AFF8040 that was replaced with a AFFA300 with the free head upgrade at year 3. The drives the AFF8040 came with were the X439_S16351T6ATD. They are end of support on 10/31/2021 however our support on the array is good until 6/30/2022. That means Netapp will support the old drives.

So if I do not root partition the new 12x3.84tb disks this time around, I would have to move data off the array temporarily in the future to move the root volumes. So the question is do I take care of the issue now instead of waiting for it to byte me later. Another option is when we buy another 12x3.84tb disks, I assume I could root partition those new disks to hold the root volume. Is there any documentation for how to setup root data partitioning with newly added disks? I setup the AFFA300 all by myself and it was option 9a on bootup if I remember.

https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-concepts%2FGUID-B745CFA8-2C4C-47F1-A984-B95D3EBCAAB4.html

Re: AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

CHRISMAKI — Wed, 20 Jan 2021 20:40:31 GMT

Hi there,

Depending which 1.6TB SSDs you have, EOS dates have already been released:

X365 & X366 - January 31, 2023
X439 & X576 - October 31, 2021

I'm willing to wager a fair bit of money you have the X36x drives though so you have some time before you need to retire the 1.6s, unless you're retiring them for other, internal reasons. As an aside, the A300 goes EOS on November 30, 2026.

The root volume relocation is pretty easy actually, and the procedure can be found here. I would be more concerned about ensuring that you're still able to take advantage of ADP on the new half shelf. ONTAP has been getting "smarter" with respect to aggregate creation, but even if it does get created in a way you are not happy with, tearing it down and recreating them isn't so bad as zeroing SSDs takes seconds, not minutes/hours...I'm looking at you 8TB+ drives; also, depending which version of ONTAP you deployed the A300 with, it may also have the Rapid Zeroing feature which came with ONTAP 9.4.

I don't believe the new drives will partitions automatically since you won't be adding them to the same RAID group or aggregate so if you went with the automatic approach, this would mean dedicating 3 SSD per node for root and 1 spare per node, losing 8 of those precious SSDs. If this was my system, I'd be looking into partitioning the drives manually to the same sizes as an A300 with 12x3.8GB SSDs would come from the factory as, and only then migrating root. If any of this makes you uncomfortable, it's probably time to talk to your local SE or the support centre on how to proceed.

AFF300 with 24x1.6TB SSDs, adding 12x3.8TB SSD Question

peiffer83 — Wed, 20 Jan 2021 19:26:14 GMT

Hello,

We currently have a 4 node Netapp Cluster with a FAS8040 (being replaced with a FAS2720) & AFF300 with 1 DS2246 IOM6 Shelf with 24x1.6TB SSD drives with ADP enabled. The cluster is running 9.3P19. Currently there are two root aggregates and two data aggregates. All the SSD's are shared between both nodes in the HA pair and the existing disk shelf is ID 00.

The new shelf is a DS224C with IOM12. My plan was to add the shelf on a separate SAS loop of 10 because its IOM 12 and different sizes. After I add the shelf's will Ontap be smart enough to create a shared aggregate with 11 of the 3.8TB SSDs, one spare, and split the storage between the nodes? Has anyone done this lately and have the best process? I will open a case too.

My concerns are as follows:

1. I see the 1.6TB SSD drives being retired in the future and our root aggregates currently live on there.

2. What is the best way to setup the new aggregates and maybe move the root aggregates to the new drives. I have done this before with mechanical drives and it required a controller restart.

snapmirror restore fails on AFF system because of compression on the destination volume

srum — Wed, 20 Jan 2021 00:19:58 GMT

Tried to restore a volume from a snapvault system to the primary system as follows:

pricluster> snapmirror restore -source-path drsvm:snapdemo1_DP -destination-path prisvm:snapdemo1 -source-snapshot snap2

The command failed, the primary volume ended up in a volume of type DP and snapmirror show-history shown:

Additional Information> Failed to start transfer because compression is enabled on destination volume "prisvm:snapdemo1" .

(Failed to start transfer. (Negotiation for using Storage Efficiency optimization failed because there is compression on the destination volume "3cd73296-af17-11ea-80db-00a098fe1a90:sanpdemo1"))

The restore destination is a AFF300 system. ( ONTAP 9.6P3)

snapvault source a fas8200 also ontap 9.6P3

Disabling inline and background compression didn`t change anything.

Any idea how to solve this problem?

Regards

Re: AFF400 NVME

bobby1977 — Mon, 11 Jan 2021 12:37:41 GMT

Thanks for sharing the link. Let me check and update you.