Hello All,

I'm new to the Netapp Powershell...

After succesfulling installing the Netapp powershell module, unable to connect to the filer using "Connect-NaController"

Fas version : 8.1.4

Powershell version :

Major  Minor  Build  Revision
-----  -----  -----  --------
3      0      -1     -1

http,https,tls/ssl is enabled...  used force secure/unsecure option.. But, stil unable to login.. Could you please share your thoughts here ?

options ssl
ssl.enable                   on        
ssl.v2.enable                on         (same value required in local+partner)
ssl.v3.enable                on         (same value required in local+partner)

httpd.access                 legacy    
httpd.admin.access           *         
httpd.admin.enable           on        
httpd.admin.hostsequiv.enable off       
httpd.admin.max_connections  512       
httpd.admin.ssl.enable       on        
httpd.admin.top-page.authentication on        
httpd.autoindex.enable       off       
httpd.bypass_traverse_checking off       
httpd.enable                 off       
httpd.ipv6.enable            off       
httpd.log.format             common     (value might be overwritten in takeover)
httpd.method.trace.enable    off       
httpd.rootdir                /vol/vol0/home/http
httpd.timeout                300        (value might be overwritten in takeover)
httpd.timewait.enable        off        (value might be overwritten in takeover)

options tls
tls.enable                   on         (same value required in local+partner)

PS C:\Windows\system32> Connect-NaController 172.27.10.111
Connect-NaController : Failed to load ntapadmin64 DLL
At line:1 char:1
+ Connect-NaController 172.27.10.111
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidResult: (172.27.10.111:NaController) [Connect-NaController], Exception
    + FullyQualifiedErrorId : RpcConnectionFailed,DataONTAP.PowerShell.SDK.ConnectNaController

PS C:\Windows\system32> Connect-NaController 172.27.10.111 -ForceUnsecure
Connect-NaController : Connection to 172.27.10.111 on port 80 for protocol HTTP timed out.
At line:1 char:1
+ Connect-NaController 172.27.10.111 -ForceUnsecure
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidResult: (172.27.10.111:NaController) [Connect-NaController], NaConnectionTimeoutE
   xception
    + FullyQualifiedErrorId : HttpConnectionFailed,DataONTAP.PowerShell.SDK.ConnectNaController

PS C:\Windows\system32> Connect-NaController 172.27.10.111 -Forcesecure
Connect-NaController : Connection to 172.27.10.111 using HTTPS failed - The request was aborted: Could not create
SSL/TLS secure channel.
The error may be resolved by generating a new certificate on the storage controller, with a longer key length.
At line:1 char:1
+ Connect-NaController 172.27.10.111 -Forcesecure
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidResult: (172.27.10.111:NaController) [Connect-NaController], NaConnectionSSLExcep
   tion
    + FullyQualifiedErrorId : HttpConnectionFailed,DataONTAP.PowerShell.SDK.ConnectNaController

Hi,

I tried to install oncommand core 5.2.2p1 to windows 2012 but I am getting error end of the setup.

The error is "problem defining SQL schema.failed to set up services"I also attached the ss.

Before setup I installed java 8.0 and adobe flash player. 

Any ideas ?

Thanks,

Tuncay

I'm pretty new to NetApp, and I'm completely stumped. I had 12 disks from a retired system that I tried to add to an existing shelf (the disks are identical in model/size). The old controllers were 7-mode and the new is a Cluster mode 8.3.

The system saw the new disks, showed them as unknown and zeroed, and I was able to assign them to my preferred controller. When I looked at the disk list, I didn't see 12 new spares as I would have expected to. I looked at the details of the disks and they show as beloning to Controller #1 (which I assigned) and aggregate #2 (Controller #1 owns aggregates #1 and #4).  

I thought maybe something went crazy with auto-assign, so I turned off auto-assign, unassigned the disks and started over, but got the exact same results with auto-assign off. So I presume the disks are still assigned to the aggregate from the old system (I cannot verify this, as those controllers are unavilable)?

Is there a way to assign these disks as spares so that I can create a new aggregate or is there some kind of "nuclear option" zeroing process I can do to remove the old system assignment?

Or is this just a support call?

Thanks!

I'm trying to pull the most recent configuration backup from my clustered netapp.

7mode allows you to do a simple 'config dump' but looks like its a bit trickier to get for CDOT.

Does anyone have experience/knowledge on pulling CDOT config backup files via the API ?

Thank you.

running WFA 4.0, and looking at the release notes of 4.1, it appears it is not possibe to create a type XDP i.e. snapmirror extended_data_protection. I have managed to create a copy of the existing snapmirror command and am able to generate the type XDP. However, it fails on the invoke-expression of the modified powershell command. The errors shown below (note that I logged the contents of the $expression). Can anyone put me on what I have missed in creating the modified snapmirror command to include the extended_data_protection type? Be forewarned, I am not a powershell expert, but I think this has something to do with how Invoke-Expression is passinig parameters to the netapp powershell cmdlets. I also installed the latest (4.4) PSTK, running PS 4.. Thanks in advance.

08:50:13.571 INFO  [Create new CIFS volume and XDP snapmirror relationship - TEST] ***** Workflow Execution Started *****
08:50:13.587 INFO  [Create volume] ### Command 'Create volume' in 'POWER_SHELL' ###
08:50:34.853 INFO  [Create volume] Get-WfaCredentials -Host seantap01
08:50:34.869 INFO  [Create volume] Credentials successfully provided for 'seantap01'
08:50:34.900 INFO  [Create volume] Connect-Controller -Type CLUSTER -Name seantap01 -Credential System.Management.Automation.PSCredential -Vserver
08:50:34.978 INFO  [Create volume] Connect-NcController (with credentials) -Name seantap01 -Timeout 60000 -ErrorAction Stop -SSLVersion TLSv1.2
08:50:37.729 INFO  [Create volume] Connected to cluster node
08:50:37.932 INFO  [Create volume] Creating a new volume: New-NcVol -ErrorAction Stop -name XDPTEST1  -SpaceReserve none -State online -Size 1000m -VserverContext seasvm01 -Type rw -SnapshotReserve 0 -Aggregate n01_aggr1_sas900 -SecurityStyle ntfs -JunctionPath /XDPTEST1
08:50:41.416 INFO  [Create volume] FlexVol 'XDPTEST1' has been create successfully.
08:50:41.463 INFO  [Create volume] Command completed, took 27876 milliseconds
08:50:41.557 INFO  [Create CIFS share] ### Command 'Create CIFS share' in 'POWER_SHELL' ###
08:51:02.574 INFO  [Create CIFS share] Creating CIFS share: XDPTEST1at path: /XDPTEST1
08:51:02.699 INFO  [Create CIFS share] Using cached cluster connection
08:51:03.261 INFO  [Create CIFS share] Command completed, took 21704 milliseconds
08:51:03.340 INFO  [Create volume] ### Command 'Create volume' in 'POWER_SHELL' ###
08:51:24.419 INFO  [Create volume] Get-WfaCredentials -Host dalntap01
08:51:24.435 INFO  [Create volume] Credentials successfully provided for 'dalntap01'
08:51:24.450 INFO  [Create volume] Connect-Controller -Type CLUSTER -Name dalntap01 -Credential System.Management.Automation.PSCredential -Vserver
08:51:24.497 INFO  [Create volume] Connect-NcController (with credentials) -Name dalntap01 -Timeout 60000 -ErrorAction Stop -SSLVersion TLSv1.2
08:51:27.278 INFO  [Create volume] Connected to cluster node
08:51:27.825 INFO  [Create volume] Creating a new volume: New-NcVol -ErrorAction Stop -name XDPTEST1_mirror  -SpaceReserve none -State online -Size 1000m -VserverContext dalsvs01 -Type dp -SnapshotReserve 0 -Aggregate aggr6_DALNTAP01_02_SATA -SecurityStyle ntfs -JunctionPath $null
08:51:29.700 INFO  [Create volume] FlexVol 'XDPTEST1_mirror' has been create successfully.
08:51:29.747 INFO  [Create volume] Command completed, took 26407 milliseconds
08:51:29.810 INFO  [Create SnapMirror - copy] ### Command 'Create SnapMirror - copy' in 'POWER_SHELL' ###
08:51:50.655 INFO  [Create SnapMirror - copy] Using cached cluster connection
08:51:50.686 INFO  [Create SnapMirror - copy] Creating SnapMirror relationship between SEANTAP01:seasvm01/XDPTEST1 and DALNTAP01:dalsvs01/XDPTEST1_mirror
08:51:50.717 INFO  [Create SnapMirror - copy] Expression Contents passed from PS - New-NcSnapmirror  -ErrorAction Stop -SourceCluster SEANTAP01 -DestinationCluster DALNTAP01 -SourceVserver seasvm01 -DestinationVserver dalsvs01 -SourceVolume XDPTEST1 -DestinationVolume XDPTEST1_mirror -Type xdp -Schedule '5min' -Policy 'mirror-vault-compress'
08:51:51.702 ERROR  [Create SnapMirror - copy] Invalid value specified for "relationship-type" element within "snapmirror-create": "xdp".
08:51:51.780 ERROR  [Create SnapMirror - copy] Command failed for Workflow 'Create new CIFS volume and XDP snapmirror relationship - TEST' with error : Invalid value specified for "relationship-type" element within "snapmirror-create": "xdp".
08:51:51.780 INFO  [Create SnapMirror - copy] ***** Workflow Execution Failed *****

HI All,

We are about to embark on a client CIFS migration from Windows 2k3/2k8 to NetApp 9.1 P8

Due to time constraints and the clients requests not to change the current AD home directory paths, we are obligated to match the current MSCS infrastructure in OnTap.

e.g.

\\MSCS1

   \accounts-dept\data

   \accounts-users$\%username%

   \finance-dept\data

   \finance-users$\%username%

\\SVM1

   \accounts-dept\data

   \accounts-users$\%username%

   \finance-dept\data

   \finance-users$\%username%

Is is possible to implement ONTAPs home dir functionality in this case?

I require 2 home dir shares:

\\svm1\accounts-user$\%w

\\svm1\finance-user$\%w

with the following home dir search paths

/svm1/svm1_vol01/accounts-user$

/svm1/svm1_vol01/finance-user$

Commands:

vserver cifs share create -vserver SVM1 -share-name %w -path accounts-user$/%w -share-properties oplocks,browsable,changenotify,homedirectory

vserver cifs share create -vserver SVM1 -share-name %w -path finance-user$/%w -share-properties oplocks,browsable,changenotify,homedirectory - Failied due to duplicate share name

Thanking you in advance,

John

We are having constant errors trying to add user or group share permissions among other things. We've tracked it down and found SVM's trying to contact domain controllers that are isolated network wise and cannot be reached. We've set preferred domain controllers and OnTap still always tries to use the Isolated DCs that it won't be able to reach.

How can I force OnTap to use one or more specific domain controllers?

Hey there,

Lets say OnCommand Systems Manager 9.1P2 we have the following rule indexs 1 & 2.  On index 1, we allow all the subnets but on index 2 we don't want a certain subnet.  Can somebody confirm this is right direction?  I read that the higher rule index that is being evaluated will overide the lower rule index.

Samples:

1 - xxx.xxx.x60.0/19 (in which we allow all subnets at our place).

2  xxx.xxx.x70.0/24 (uncheck both  read-only and read/write on access details)

Thanks,

TT

Hi 

I have 9.0 ONTAP simulator and have created A NFS volume. I have done the auditing for the SVM. I have a few questions regarding the Native auditing for NFS 

1) Is the Auditing inheritance not possible for  NFS 

2) when I am ceating a File/Folder I am not seeing any events.

3)No events generated for file read or File open 

Thanks ,
Annadyita

::system controller flash-cache*> system node external-cache show -node 

                  Node: **********

            Is Enabled: true

          Is rewarm on: true

    Is Mbuf inserts on: true

              PCS size: 1024

Is hya caching enabled: true

The units in location A have a flashpool configured for specific aggregates, however the location B system currently does not have any Flashpools configured, so I strongly suspect that running in “Hybrid-Mode” is not the issue.  

Looking at the hit-metrics, we’re not getting much value out of our FlashPools either, which I find hugely surprising, as our working set should comfortable fit into these, and our read times  be massively accelerated by them – I can see that we’re getting really good hit rates (>75%) on our onboard cache – but that we’re still reaching all the way back to disk regularly.  Is there some configuration option I have missed that will help us to shape read caching more optimally?  Please see here:

Our write speeds are lovely

the ONTAP GUI interface repeatedly informs me that FlashCache is disabled – I can press the “enable” button, and see the optimization graph running, but if I browse away from the page and back it shows as “Disabled” again: is there a bug?

it says it’s “caching metadata only” (right underneath the unpleasantly high latency number) when enabled and disabled, which would seem a poor use for it given our entirely virtualised environment – but I don’t know how to change this to Default Mode (or even Low-Priority, although this is probably less suitable for our active data set).

Hello, 

Currently I have a filesystem infrastructure in NetAPP and will disable it in the future. Before deactivating I will perfome backup all the information and I will store it for 1 year in case I need some restore.

Do you know how to inform or advise me if there is any prerequisite for NetAPP that the restore should only be on NetAPP infrastructure or technology?

 

Thank You,

ONTAP Recipes: Did you know you can…?

Easily configure SSH multifactor authentication for administrator accounts (MFA) in ONTAP 9.3

In ONTAP 9.3, you can require that administrators log in to an admin or data SVM with both an SSH public key and a user password.

1. Enable SSH MFA for a local user account:

cluster-1::> security login create -vserver engData1 -user-or-group-name admin2 -application ssh -authentication-method publickey -role admin -secondauthentication-method password

Please enter a password for user 'admin2':

Please enter it again:

Warning: To use public-key authentication, you must create a public key for user "admin2"

 2. Create a public key for the administrator:

cluster1::>security login publickey create -vserver engData1 -username admin2 -index 5

-publickey  “ssh-rsa AAB3NzaC1yc2EAAAABIwAAAIEAspH64CYbUsDQCdW22JnK6J/vU9upn

Kzd2zAk9C1f7YaWRUAFNs2Qe5lUmQ3ldi8AD0Vfbr5T6HZPCixNAIzaFciDy7hgnmdj9eNGed

Gr/JNrftQbLD1hZybX+72DpQB0tYWBhe6eDJ1oPLobZBGfMlPXh8VjeU44i7W4+s0hG0E=tsmith

@publickey.example.com"

For more details on SSH MFA authentication, see “Enabling SSH Multifactor Authentication” in the Administrator Authentication and RBAC Power Guide

ONTAP Recipes: Did you know you can…? 

Easily configure KMIP servers for NetApp volume encryption in ONTAP 9.3

In ONTAP 9.3, you can configure KMIP servers for NetApp Volume Encryption.

 1. If you are upgrading to ONTAP 9.3 from a previous version, delete any external key management configurations for the cluster:

 cluster1::> security key-manager delete-kmip-config

 2. Configure key manager connectivity for cluster nodes:

 cluster1::> security key-manager setup

 3. Enter the appropriate responses in the wizard.

 4. Add a KMIP server at the IP address 20.1.1.1:

 security key-manager add -address 20.1.1.1

 5. Add another KMIP server for redundancy:

security key-manager add -address 20.1.1.2

For more information see the ONTAP 9 doc center

ONTAP Recipes: Did you know you can…? 

Easily rekey an encrypted volume in ONTAP 9.3

In ONTAP 9.3, you can rekey an encrypted volume in place.

1. Rekey an encrypted volume:

cluster1::> volume encryption rekey -vserver vs1 -volume vol1

For more information, see the ONTAP 9 documentation center

ONTAP Recipes: Did you know you can…?

Easily assign a volume to an Adaptive QoS Policy in ONTAP 9.3

Adaptive QoS is available using the following:

• ONTAP CLI (steps shown below)
• System Manager Application Provisioning
• ONTAP API
• ONTAP SDK

To assign a volume to an Adaptive QoS Policy, follow these steps in the ONTAP command line interface (CLI):

1. During volume create, assign an Adaptive QoS policy:

volume create -volume vol1 -size 1TB -aggregate data_aggr -qos-adaptive-policy-group extreme

2. For existing volumes, you can modify or assign an Adaptive QoS policy:

volume modify -volume vol1 -qos-adaptive-policy-group performance

3. There are 3 default Adaptive QoS policies in ONTAP along with the ability to create custom policies:

::> qos adaptive-policy-group show

                                          Expected             Peak

Name             Vserver       Wklds                  IOPS                   IOPS

----                   -------            -----                  --------                    ----

extreme           cluster           0                    6144 IOPS/TB       12288 IOPS/TB

performance    cluster           0                    2048 IOPS/TB        4096 IOPS/TB

value                cluster           0                    128   IOPS/TB          512 IOPS/TB

When a volume is assigned to an Adaptive QoS policy, the IOPS allocated to the volume is set based on the volume size and the amount of space used in the volume.

For a 1TB volume assigned to the “performance” policy, the floor and ceiling start at 2048 IOPS. As more space is used in the volume the ceiling increases automatically to a maximum of 4096 IOPS.

For a small volume, a fixed “absolute minimum” number of IOPS will be allocated. For example, with a 20GB volume assigned to the “performance” policy, the floor and ceiling will be set to 500IOPS.

The fixed IOPS allocation is as follows for the 3 default Adaptive QoS policies.

• Extreme –1000 IOPS
• Performance – 500 IOPS
• Value – 75 IOPS

Note: Adaptive QoS is applicable to both AFF & FAS platforms. However, QoS min is not enforced on Non-AFF platforms.

For more information, see the ONTAP 9 documentation center

Hi there!

   I'm setting up ONTAP Select 9.2 in my lab, where we have limited hardware.  I've got a two-node VMware cluster with each node having 1.6TB of local storage.  The rest is SAN-based.  Unfortunately, I can't quite stretch the hardware enough to get 2+TB of local storage to meet the minimum size requirement.

   I'd never even think about doing this in production, but given that this is a lab only and we just need it for demo/learning purposes, is there any way to manually bypass the minimum size requirement of 2TB, and/or make it use thin provisioning?  I'm ok with deploying entirely from the command line, but I really need a way to get this working without buying a bunch of bigger disks...

Thanks!

Hello,

our customers use large Microsoft Access databases on our NetApp with ONTAP  9.1.

After closing such a large database ms access start compression of this and this tooks about 5 Minutes.

On a similar Windows Server Share ist tooks only 1 Minute.

On our old 7-Mode Metro Cluster it also tooks only 1 minute.

The database is accessed over a cifs share. oplocks are disabled.

Does anybody have an idea to optimize the performance?

Regards,

Christian

Hello,

Is it possible to deploy ONTAP Select 9.3 without vCenter ? My customer is running an ESXi 6.5 u1 server without vCenter.

Regards,

Our Linux admin can mount the volume and see the folders:

mount dcnas02-nfs:/vol/livesiteprodslgdc /mnt
[root@slglvmo7 ~]# ll /mnt
total 52
drwxrwxrwx 12 nobody nobody  4096 Mar 23  2017 cache
drwxrwxr-x   8  nobody nobody   40960 Nov 13 16:45 content
drwxrwxr-x   3  nobody nobody   4096 Jul 27  2016 library

However, he cannot mount the folder:

umount /mnt
[root@slglvmo7 ~]# mount dcnas02-nfs:/vol/livesiteprodslgdc/content   /mnt
mount.nfs: access denied by server while mounting dcnas02-nfs:/vol/livesiteprodslgdc/content

From my perspective we only export the volume and the export rules apply to this:

GRCLNAS::> export-policy  rule show -vserver dcnas02-nfs  -policyname transition_export_policy_15
             Policy          Rule    Access   Client                RO
Vserver      Name            Index   Protocol Match                 Rule
------------ --------------- ------  -------- --------------------- ---------
dcnas02-nfs  transition_export_policy_15
                             1       nfs      slglvmf5.internal.    sys
                                              xxxxx.com
dcnas02-nfs  transition_export_policy_15
                             2       nfs      0.0.0.0/0             sys
dcnas02-nfs  transition_export_policy_15
                             3       cifs     0.0.0.0/0             any

cheers rob

Hi All

Currently use Snapmirror from Source to destination filer and Snapvault from destination filer (snapmirror destination volume) to a new volume.

We use 7-Mode 8.2.3 P3 on both source and destination.

Currently we are experimenting with the snapmirror schedule. We used to have it set to every 12 hours but have reduced it way down to every 30 minutes for all of our snapmirror relationships. The main aim was to ensure the delta changes were small.

the Snapvault schedules run once a day but we finding the rate of change is too much and this then affects the future mirrors and constantly says "destination in use as source of SnapVault for NetBackup, dump, vol copy or SnapMirror".

I am trying to get the right balance and want to see if any of the reporting tools can help me identify why some of our flexvols have a high rate of change or understand what sort of throughput we are getting?

Is there anyway I can achieve this so I can form a amangement report for the IT leaders?

Many Thanks