ONTAP Discussions

DOT 8.0.1 7-Mode https proxy for ASUP act different as in 7.3.4

udo_braunschweiger
8,800 Views

At one of our customers in Switzerland we have a V-Series V6080 MetroCluster with Hitachi VSP Backend Storage and two FAS6040 as Nearstore System with DS4243 containing 2TB S-ATA Disk Drives.

The V-Series V6080 serving nfs, iSCSI  and CIFS, are running DOT 7.3.4

The Nearstores FAS6040 running 8.0.1 with 64bit aggregates as snapvault destination

As a company policy the dns servers configured on the server systems and storage controllers do not allow resollving hostnames or URL outside of the company network.

We set the autosupport options in order to post ASUP messages to NetApp using https and configured the proxy server with the correct tcp port number.

-> This cannot be configured with Systems Manager! Systems Manager allow only plain ip addresses, no sockets like 192.168.222.34:3233 😞

toaster> options autosupport.support.transport https

this works perfectly well on the Systems running 7.3.4

But it does not work with 8.0.1. The OnTap complains, the ASUP URL support.netapp.com cannot be resolved!!

To me it seems as:

DOT 7.3.4 sends the ASUP message to the Proxy with the recipients URL; the proxy then resolves the URL and forwards the message properly

DOT 8.0.1 first resolves the URL to an IP Address and sends the message with the IP-Address as a recipient to the proxy server and the proxy forwards it to NetApp.

We workaround the different behaviour by adding a line in the /etc/hosts to resolve the ASUP URL. But this is not what we like.

I opened a case for this but the issue was not understand by NetApp Support.

Any help is apprechiated!!

6 REPLIES 6

Darkstar
8,800 Views

Can't you set the ASUP to use smtp instead of http/https? It's often easier to configure the mail server to allow/whitelist one specific recipient

-Michael

udo_braunschweiger
8,800 Views

Hello

Of course i can... but this is not the question…

With smtp, the content is not encrypted over internet, so we are not allowed to send it.

Freundliche Grüsse / kind regards

Udo Braunschweiger

Technical Sales Professional

ABO-Storage Distribution AG

<http://www.innovation2011.ch/

RichardSopp
8,800 Views

I've seen this too - comparing lab systems running 7.3.3 and 8.0.1 7-mode.

When I raised a support case I was told it was a configuration issue with my lab DNS server.

I too have requirements for HTTPS to encrypt the data over the internet.

Curious whether you opened a support case and what was the resolution?

RichardSopp
8,800 Views

Hi,

Looks like you need 8.0.1P1 (see bug article http://now.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=437169).

I'm going to install it on my lab system tonight and see if it fixes the problem.

Richard

RichardSopp
8,800 Views

Validated in the lab - definitely fixed with 8.0.1P1 - can see me ASUP post in the My Autosupport tool.

udo_braunschweiger
8,800 Views

Hello Richard

Thanks for that good news!

we have a maintenance weekend soon so we can install the Patch Release!

Sent from my iPad

Public