topic Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4 in ONTAP Discussions

DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

udo_braunschweiger — Thu, 05 Jun 2025 06:59:33 GMT

At one of our customers in Switzerland we have a V-Series V6080 MetroCluster with Hitachi VSP Backend Storage and two FAS6040 as Nearstore System with DS4243 containing 2TB S-ATA Disk Drives.

The V-Series V6080 serving nfs, iSCSI and CIFS, are running DOT 7.3.4

The Nearstores FAS6040 running 8.0.1 with 64bit aggregates as snapvault destination

As a company policy the dns servers configured on the server systems and storage controllers do not allow resollving hostnames or URL outside of the company network.

We set the autosupport options in order to post ASUP messages to NetApp using https and configured the proxy server with the correct tcp port number.

-> This cannot be configured with Systems Manager! Systems Manager allow only plain ip addresses, no sockets like 192.168.222.34:3233 😞

toaster> options autosupport.support.transport https

this works perfectly well on the Systems running 7.3.4

But it does not work with 8.0.1. The OnTap complains, the ASUP URL support.netapp.com cannot be resolved!!

To me it seems as:

DOT 7.3.4 sends the ASUP message to the Proxy with the recipients URL; the proxy then resolves the URL and forwards the message properly

DOT 8.0.1 first resolves the URL to an IP Address and sends the message with the IP-Address as a recipient to the proxy server and the proxy forwards it to NetApp.

We workaround the different behaviour by adding a line in the /etc/hosts to resolve the ASUP URL. But this is not what we like.

I opened a case for this but the issue was not understand by NetApp Support.

Any help is apprechiated!!

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

Darkstar — Thu, 24 Feb 2011 15:57:23 GMT

Can't you set the ASUP to use smtp instead of http/https? It's often easier to configure the mail server to allow/whitelist one specific recipient

-Michael

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

udo_braunschweiger — Fri, 25 Feb 2011 17:01:45 GMT

Hello

Of course i can... but this is not the question…

With smtp, the content is not encrypted over internet, so we are not allowed to send it.

Freundliche Grüsse / kind regards

Udo Braunschweiger

Technical Sales Professional

ABO-Storage Distribution AG

<http://www.innovation2011.ch/

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

RichardSopp — Thu, 03 Mar 2011 16:16:17 GMT

I've seen this too - comparing lab systems running 7.3.3 and 8.0.1 7-mode.

When I raised a support case I was told it was a configuration issue with my lab DNS server.

I too have requirements for HTTPS to encrypt the data over the internet.

Curious whether you opened a support case and what was the resolution?

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

RichardSopp — Fri, 04 Mar 2011 00:21:40 GMT

Hi,

Looks like you need 8.0.1P1 (see bug article http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=437169).

I'm going to install it on my lab system tonight and see if it fixes the problem.

Richard

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

RichardSopp — Fri, 04 Mar 2011 02:21:18 GMT

Validated in the lab - definitely fixed with 8.0.1P1 - can see me ASUP post in the My Autosupport tool.

Re: DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

udo_braunschweiger — Fri, 04 Mar 2011 06:52:43 GMT

Hello Richard

Thanks for that good news!

we have a maintenance weekend soon so we can install the Patch Release!

Sent from my iPad