The paths to the controler serving the target LUNs are the primary paths, the failover controller is the secondary 'non-optimized' paths. You need access to both paths for cluster failover to work with single_image cfmode. Your multipathing on the client needs to recognize this and use the primary paths while available... I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
I've initialized a few big systems, and I wouldn't think it shouldn't take that long. You're not seeing any err messages ? Progress is showing ? Maybe patience is a virtue ? I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Xzearik - For file access event auditing you need to configure 'options cifs.audit.file_access_events.enable on'. You'll also need to set the system security ACLs on the files/folders that you wish to have auditing on. This can be done with Storage-Level Access Guard security, or Windows Properties/Security, or by applying a GPO to propogate the SACLs down through a directory heirarchy. The internal audit log file is stored as /etc/log/auditlog.alf. The .evt files can be saved off to another location with 'options cifs.audit.saveas <fullpath>'. You can create a secure share for this path. You can kill individual cifs sessions with 'cifs terminate'. See the man pages. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
The file is generated by CIFS setup. SIDs and user names can be translated with the 'cifs lookup' command. (or through FilerView) You can specify additional users and groups during CIFS setup as well. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Members of the 'Administrators' group as defined in /etc/lclgroups.cfg can manage the filer. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Welcome to the NetApp community. We'll all try to guide you ! Can you see an ISCSI sesion login sesion message in your syslog file on the filer ? ( /etc/messages ) Did you run through the ISCSI initiator setup on the Windows server ? Did you add credentials for the filer in Snapdrive ? It's usualy best practice to try creating the LUN through SnapDrive... Wish you were in class here in Atlanta with us to help you through this problem. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Which one of these file systems are you trying to write to ? Output of 'mount' command on aix system would be useful. Which user are you trying to mount as from aix ? Open export on /vol/vol0 is scary. Have you set admin host on this system ? 'mixed' security style ( luntest ? ) is something I usualy avoid as well... I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Matt - Option #3 ? Ctrlr1/Ctrlr2: 24 disks each. 22 disks each in 22 disk raid groups. Disks split evenly across all shelves. Use the 'disk replace' command to juggle out the existing disks to the new shelves. Consider the hot spot created when adding the few disks to the existing aggr - maybe do a 'reallocate'. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Lots of err message logging from your client, but what is the background information ? Did you ever enable SSL on the filer using 'secureadmin' ? I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Ms Das - I've been enjoying tr3737 again today ! ( http://media.netapp.com/documents/tr-3737.pdf ) Thought you'd like to know your work is appreciated. : ) I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff
... View more
Joost - That thin provisioning will work out to a lot more than two cents worth of storage ! This could be a very valuable comment to any who are not thin provisioning... I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
'1m' would be a valid value, but it would refer to 1 month. It should also be noted that just writing to the file ( to test ) will defeat the auto commit process. I'm interested in how long the scanning process may add delay, and will try to set up a read test of the files attributes to measure it in the lab... I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
If you have delay set to '1m' it will take one month to commit ? The man page isn't specific on what additional delay the scan implements, but with a minimum delay of two hours I wouldn't be surprised if the additional delay was hours. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Haven't played with it, but our courseware from the NPSA class says it is based on a scan process and may take some time before the files are changed to a read only state. It also says the min delay is two hours. ( as does the man page ) 'm' is a valid time indicator - but it refers to months instead of minutes. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
There isn't any way I know of to get individual initiator statistics from the cli, or otherwise in an FC environ. I even did a browse through the counters from the 'stats' command. You would be able to get these statistics from the individual hosts, or from your FC switches. SANscreen collects this kind of data from the infrastructure to corelate and answer these kinds of questions. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Eric - It's my understanding that add on cards are configured at the factory to be initiator or target ports, and can not be re-configured. Motherboard ports can be reconfigured. This requires a re-boot. I haven't seen any best practice documents that say you shouldn't use motherboard target ports as well as add on card target ports. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Petter - I'd chalk this up to the same category as the snaptrust/snapencrypt issue. ( it did come from the slides that were part of 'Future ?' ) Vaporware from somewhere ? If it's not on the NOW site docs, I'm not going to believe in it. You may want to track down the author of the BNUG presentation. I have to wonder if there's something in a translation problem ? I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Petter - I briefed through the slides and did see a reference to Decru on slide #22 of the second presentation. There's this reference on slide #25: NetApp suggests DECRU too expensive. NetApp just came out with this features encryption on volume. You can decide the level of encryption (128 bits, 256 bits, AES, public key, …). Again easy to implement: snapencrypt /vol/database-db1 start –protocol AES –key 256 snaptrust /vol/database-db1 host-db-1 host-app-1 I've got no idea where this comes from ! It's not in 8.0.1, nor does a search of the NOW site come up with anything ? What interests me is that it seems to be a very specific reference. A Google search comes up with a Mozilla reference. If anybody else knows anything about this, I'd love to hear it, but I think it's all just a rumour. I also noticed a reference to lack of integration with SnapMirror and SnapVault with regard to SnapManager. Wondered whether they'd seen the OnCommand Protection Mgr integration in the newer versions ? I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Two different questions... Is the Quantum drive implemented in the tape device config file ? It looks like it, as with the other branded Ultrium drives. see http://now.netapp.com/NOW/download/tools/tape_config/. Will Networker invoke backups on the filer ? I tried to do a deep dive on the issue the other week. It seems native 'dump' and 'restore' operations can be invoked with NDMP, but I did not find support for invoking Snapmirror to tape from Networker. I got a bounce when I tried to email the NDMP support team with the question. I do not have working experience with this configuration. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Petter - The only at rest encryption I know of offered by NetApp is DataFort. The E-series for NAS and iscsi is still available. The S-series for SCSI and F-series for FC have been discontinued. The LKM key mgt device is now bundled with Brocade encryption switches for a FC solution. The encryption technologies supported on filer would be NFSv4 with full Kerberos and IPSec for data in-flight. Other encryption would include SSH and SSL for command and control. I haven't heard about new 'SnapEncrypt' solutions, but am never surprised with what marketing comes up with. If there is any other encryption NetApp offers or is coming then I'd love to hear about it. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Radek - It's not a Decru any more - it's a DataFort ! : ) Sssssh. I'll share a SnapSecret with you: It's a marketing thing. I'll be SnapHappy about it all ! SnapTrust/SnapEncrypt = LKM (Lifetime Key Mgt) + BES (Brocade Encryption Switch) ? Yes, I'm getting silly here. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Your calculation in the first post is close, but the LUN wasn't full of data. The LUN cost you 150G, but the first snap only took ~133G more, 'cause you only had that much data written to the LUN. Additional snapshots would only take up the delta ammount of space. With fractional reserve at 100% ONTAP guaranteed space to write 150G more. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Richard - Thank you for posting the slides. I'll use them in class when talking about OnCommand, and share them with our other instructors. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff
... View more
Marc - Snapshots are volume based - there's no way to delete for a given folder. No way to hide snapshots share by share - just by volume. Wish there was a better answer for you. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more
Err, not exactly. Snap reserve space will show used for changed blocks as data in the LUN is overwritten after taking a snapshot. Fractional reserve is another mechanism for reserving space in a volume for overwriting blocks in a LUN which has had a snapshot taken. Snap reserve is usualy set to zero for volumes containing a LUN, given that we have Fractional reserve to use to guarantee overwrites. See the 'Storage Provisioning' section of the 'Block Access Management Guide'. There's also an excellent TR on thin provisioning in a SAN environment: http://media.netapp.com/documents/tr-3483.pdf You may also wish to look at tr3563. I hope this response has been helpful to you. At your service, Eugene E. Kashpureff ekashp@kashpureff.org Fastlane NetApp Instructor and Independent Consultant http://www.fastlaneus.com/ http://www.linkedin.com/in/eugenekashpureff (P.S. I appreciate points for helpful or correct answers.)
... View more