Help with ONTap 9.1 routing

pfwhufc · ‎2017-04-04

I am testing the waters with ONTap 9.1, and fired up a simulator version.

Aside from the differences in commands, I cannot connect externally to, or from any of the addresses bar 1 - 10.xx.xx.214.

I am thinking that the routing tables seem to be incomplete, and not having had any prior look at this version of ONTap, I am struggling.

Firstly, yes they are in dns, A record, and PTR reverse records in place. nslookup all fine.

Booted up, did the CTRL-C, Option 4.

Supplied the name, IP etc ..., and it did it all for me, and this is what I have: -

natestclus::> network route show

Vserver Destination Gateway Metric

------------------- ----------------------- ------------------- ----------

Cluster 0.0.0.0/0 10.xx.xx.254 20

natestclus 0.0.0.0/0 10.xx.xx.254 20

network interface show

Logical Status Network Current Current Is

Vserver Interface Admin/Oper Address/Mask Node Port Home

--------------------- ---------------------------- ------------------ -------------------------- ------------------ --------------- ------------

Cluster

natestclus-01_clus1 up/up 10.xx.xx.213/24 natestclus-01 e0a true

natestclus-01_clus2 up/up 10.xx.xx.214/24 natestclus-01 e0b true

natestclus

cluster_mgmt up/up 10.xx.xx.202/24 natestclus-01 e0d true

natestclus-01_mgmt1 up/up 10.xx.xx.203/24 natestclus-01 e0c true

natestclus::> network port show

Node: natestclus-01

Speed (Mbps) Health

Port IPSpace Broadcast Domain Link MTU Admin/Oper Status

------------ ------------------- ---------------------------- -------- -------- ----------------------- -------------

e0a Cluster Cluster up 1500 auto/1000 healthy

e0b Cluster Cluster up 1500 auto/1000 healthy

e0c Default Cluster up 1500 auto/1000 healthy

e0d Default Cluster up 1500 auto/1000 healthy

natestclus::> cluster show

Node Health Eligibility

----------------------- ------------ -------------

natestclus-01 true true

natestclus::> system service web show

External Web Services: true

Status: online

HTTP Protocol Port: 80

HTTPS Protocol Port: 443

HTTP Enabled: false

natestclus::>security login show

Vserver: natestclus

Authentication Acct Is-Nsswitch

User/Group Name Application Method Role Name Locked Group

---------------------------- ------------------------- ------------------- ----------------- ----------- ----------------

admin console password admin no no

admin http password admin no no

admin ontapi password admin no no

admin service-processor password admin no no

admin ssh password admin no no

autosupport console password autosupport no no

natestclus::>network route show-lifs

Vserver: Cluster

Destination Gateway Logical Interfaces

------------------------------ -------------------- ----------------------------

0.0.0.0/0 10.xx.xx.254 natestclus-01_clus1,

natestclus-01_clus2

Vserver: natestclus

Destination Gateway Logical Interfaces

------------------------------ -------------------- ----------------------------

0.0.0.0/0 10.xx.xx.254 cluster_mgmt,

natestclus-01_mgmt1

I can ping 1 of the 4 interfaces - 10.xx.xx.213

I can https to i, but when I try and sign in with username admin (not linked to AD), I get: -

System Manager will not launch other than node and cluster management LIF (Error: 1)

Any help would be greatly appreciated.

Thanks.

pfwhufc · ‎2017-04-04

Just had the simulator reboot itself, and now when I do: -

network interface show

Logical Status Network Current Current Is

Vserver Interface Admin/Oper Address/Mask Node Port Home

--------------------- ---------------------------- ------------------ -------------------------- ------------------ --------------- ------------

natestclus

natestclus-01_mgmt1 up/up 10.xx.xx.203/24 natestclus-01 e0c true

I just have the above.

The other 3 interfaces have gone.

network port show shows all 4, with no Broadcast Domain, and Health Status is blank.

network route show just has natestclus, not Cluster as well.

robinpeter · ‎2017-04-04

I dont have the snaswer for your interface disappering.. thats quiet strange. follow the simulator setup guide.

but you should not configure your cluter interconnect network and mgmt network in same subnet.

and by default cluster interconnect network is not routable, should not have a gateway.

here is some example how its should be looks like for a 4 node cluster.

cluster1::> network interface show
            Logical    Status     Network            Current       Current Is
Vserver     Interface  Admin/Oper Address/Mask       Node          Port    Home
----------- ---------- ---------- ------------------ ------------- ------- ----
Cluster
            cluster1-01_clus1
                         up/up    169.254.201.217/16 cluster1-01   e0a     true
            cluster1-02_clus1
                         up/up    169.254.137.178/16 cluster1-02   e0a     true
            cluster1-03_clus1
                         up/up    169.254.101.214/16 cluster1-03   e0a     true
            cluster1-04_clus1
                         up/up    169.254.123.170/16 cluster1-04   e0a     true
cluster1
            cluster1-01_mgmt1
                         up/up    192.168.0.111/24   cluster1-01   e0c     true
            cluster1-02_mgmt1
                         up/up    192.168.0.112/24   cluster1-02   e0c     true
            cluster1-03_mgmt1
                         up/up    192.168.0.113/24   cluster1-03   e0c     true
            cluster1-04_mgmt1
                         up/up    192.168.0.114/24   cluster1-04   e0c     true
            cluster_mgmt up/up    192.168.0.101/24   cluster1-01   e0c     true


cluster1::> network route show
Vserver             Destination     Gateway         Metric
------------------- --------------- --------------- ------
cluster1
                    0.0.0.0/0       192.168.0.1     20

As you can see "Cluster" netowrk dont have routing address.

only the mgmt svm "cluster1" have routing.

and you should be doing all the mgmt via cluster_mgt or node_mgmt LIF.

pfwhufc · ‎2017-04-05

Thanks. I have now corrected: -

natestclus::> network route show

Vserver Destination Gateway Metric

------------------- ----------------------- ------------------- ----------

natestclus 0.0.0.0/0 10.xx.xx.254 20

network interface show

Logical Status Network Current Current Is

Vserver Interface Admin/Oper Address/Mask Node Port Home

--------------------- ---------------------------- ------------------ -------------------------- ------------------ --------------- ------------

Cluster

natestclus-01_clus1 up/up 172.xx.xx.240/16 natestclus-01 e0a true

natestclus-01_clus2 up/up 172.xx.xx.241/16 natestclus-01 e0b true

natestclus

cluster_mgmt up/up 10.xx.xx.202/24 natestclus-01 e0d true

natestclus-01_mgmt1 up/up 10.xx.xx.203/24 natestclus-01 e0c true

natestclus::> network port show

Node: natestclus-01

Speed (Mbps) Health

Port IPSpace Broadcast Domain Link MTU Admin/Oper Status

------------ ------------------- ---------------------------- -------- -------- ----------------------- -------------

e0a Cluster Cluster up 1500 auto/1000 healthy

e0b Cluster Cluster up 1500 auto/1000 healthy

e0c Default Cluster up 1500 auto/1000 healthy

e0d Default Cluster up 1500 auto/1000 healthy

natestclus::> cluster show

Node Health Eligibility

----------------------- ------------ -------------

natestclus-01 true true

But it still doesn't work - still cannot ping, or connect externally.

On the filer itself, I can ping as follows: -

natestclus::> ping 10.xx.xx.202

10.xx.xx.202 is alive

natestclus::> ping 10.xx.xx.203

10.xx.xx.203 is alive

natestclus::> ping 172.xx.xx.240

no answer from 172.xx.xx.240

natestclus::> ping 172.xx.xx.241

no answer from 172.xx.xx.241

I notice that your setup has all the Cluster vserver addresses on just 1 port, and the same on cluster1.