I need to revert these LIFs back to their home ports. However, several critical applications and clients are currently connected to them. In the past, I encountered issues when reverting LIFs without first considering the location of the associated volumes. To minimize risk and avoid any potential disruption, can the LIFs and their associated volumes remain on the same HA pair within the cluster during the revert process? We would appreciate any recommendations or best practices for performing the LIF revert safely before proceeding. thanks, RT
... View more
Hi We are currently testing the use of MAV which is supported in Ontap 9.11.1x. As I see it, it is only possible to create local users as approvers, does anyone know if there will be support for using AD groups as a approvers. ? The idea is via. automation that a user is temporarily members of a AD group to approve pending approver
... View more
Hi everyone! NetApp's Multi-admin-verify (MAV) is a great tool for enforcing dual control on potentially dangerous commands (or any command - it's up to you as an admin to decide!), so having a sandbox to play with in labondemand.netapp.com was something I've long thought would be handy. However, it's one thing to play in a sandbox, and another thing to make it in the first place, and know what steps to follow to set it up in your production environment. We don't have a pre-defined lab for MAV that I could find, so I wrote the attached powershell script to build one from scratch. The script does the following: Creates AD OUs and groups for StorageAdmins and StorageOperators Provisions 9 accounts into each of them (storageadmX and storageopX), password: Netapp1! Creates an SVM on ONTAP cluster 1 (192.168.0.101) Domain joins SVM to demo.netapp.com Sets up domain tunnel through that SVM Sets up StorageAdmin and StorageOperator roles based on the admin role Assigns groups to roles Sets up MAV with StorageOperator requiring MAV approval, StorageAdmin not requiring approval Restricts vol delete and snap delete commands under MAV for StorageOperator I’ve tested it with 9.16.1 and 9.19.1 labs and it’s done what I expected with regards to setup - I haven’t done deep testing of MAV with it, the aim is to setup an environment where MAV can be tested. To use it: Create a lab against https://labondemand.netapp.com/node/1078 (9.16.1X) or https://labondemand.netapp.com/node/1561 (9.19.1X), Drag the script into the lab window once the login is finished, Find it in the “Cloud storage” under “My Computer”, Copy it to the Desktop Open PowerShell, and run the command I hope people find this helpful! Please note values are hardcoded for the demo environment on labondemand.netapp.com, but you are welcome to use it as a basis for your own environments too. This script is provided only as community supported - please do not call NetApp support for help with it.
... View more
We have developed an automation Ansible script which logs into the ONTAP System and fetch the details of the igroups whose initiators are not-logged in. This script logs into the ONTAP System multiple times, and in context to that please let us know if this can cause an issue on the Storage at any given time. Please highlight if this repeated login by the script on the ONTAP system can put the Storage in a non-ideal situation. --> We also want to know the impact on ontap node i.e, CPU utilization on Ontap node to use the script to try login attempts to the storage after each 30 or 40 secs to fetch the requested information. Please advice --> What is the amount of CPU utilization may cause if the scripts attempts login for every 30s to Storage Looking forward to your response. Thank you!
... View more
I currently have three network interfaces (LIFs) that are not on their home ports, and I would like to revert them back to their designated home ports. Do we need to move any volumes as part of the LIF revert process, or can the LIFs be reverted independently? I spoke with Park Place support, and they advised that there is no need to move the volumes when reverting the LIFs to their home ports. Please let me know if you have any feedback or concerns. Thank you.
... View more