Question from a customer setting up new FAS8200s with 3-4 shelves of 1.8TB SAS drives:

Config: set up two aggregates, one to each node, each with ½ the disks, and a single SVM for each data aggr and node. If the disks are “Shared”, does that mean both SVMs can write directly to the underlying disks without going through the interconnect links? 

Customer is trying to avoid having any I/O go through the interconnect link, and wants to know if shared disks makes this possible.  Or if having junction paths “connecting” the two SVMs makes it possible.

Ideally, they would like to have a single large data aggr that can be accessed equally by both SVMs via both nodes, without going through the interconnect link, but don't konw if that is possible.  They can't use FlexGroups at this time.

Another way of asking this:

“Does node ‘ownership’ of the disk determine the use of interconnect [for I/O] , or does SVM ‘ownership’ define it?”

Customer has two AFF8080EX.

The basic usage is as follows.

This is for AFF2 sysstat -x 

This is for AFF2 sysstatM

This is for snapshot background for AFF2 

Cache Hit ratio

AFF2(For Internal Office)

workload_volume:SCWOS02-wid9819:ops:3729/s

workload_volume:SCWOS02-wid9819:read_io_type.cache:55%

workload_volume:VDISOOS05-wid9955:ops:4194/s

workload_volume:VDISOOS05-wid9955:read_io_type.cache:61%

workload_volume:VDISOOS06-wid23596:ops:5017/s

workload_volume:VDISOOS06-wid23596:read_io_type.cache:63%

workload_volume:VDISOOS07-wid28852:ops:10488/s

workload_volume:VDISOOS07-wid28852:read_io_type.cache:72%

AFF1(For Internet Virtualization)

workload_volume:VDIIOS02-wid2746:ops:6913/s

workload_volume:VDIIOS02-wid2746:read_io_type.cache:95%

workload_volume:VDIIOS04-wid23117:ops:8795/s

workload_volume:VDIIOS04-wid23117:read_io_type.cache:95%

workload_volume:VDIIMM02-wid28829:ops:16702/s

workload_volume:VDIIMM02-wid28829:read_io_type.cache:99%

And AFF2 storage performs snapmirror on six volumes at the same time with two target storage, and proceeds in 10-minute increments.

And AFF2 storage is running snapshot for six volumes per 5 minutes

And AFF2 storage is using Inline dedup/compression/compaction

I understand that CPU usage is high, but CPU usage seems to be too high compared to IO.
I doubt it is a normal situation.

The storage for the internal office is very important and can not be used in this high CPU state.
If this is a problem in their environment, they will go to the AFF A700.
If it is a problem of snapmirror or snapshot, it will be adjusted appropriately.
I plan to make a plan based on precise reason in any situation. 

NetApp® ONTAP® Select is NetApp’s solution for the software-defined storage (SDS) market. ONTAP Select brings enterprise-class storage management features to the software-defined data center. ONTAP Select extends the Data Fabric solution to the commodity server offerings likely already existing in the customer’s data center.

This document describes the best practices that should be followed when building an ONTAP Select cluster, especially in a KVM hypervisor environment, from hardware selection to deployment and configuration. Additionally, it aims to answer the following questions:

• How is ONTAP Select different from the engineered FAS storage platforms?
• Why were certain design choices made when creating the ONTAP Select architecture?
• What are the performance implications of the various configuration options?

For more details, please check here

We are trying to connect Data Ontap 9.3P2 (FAS9000) to AD Domain Controller.

We are getting below error. Could you please help.

ECC_MCC_2::> vserver cifs create -vserver ecc_vs1 -cifs-server eccnas7 -domain aaa.com

In order to create an Active Directory machine account for the CIFS server,
you must supply the name and password of a Windows account with sufficient
privileges to add computers to the "CN=Computers" container within the
"AAA.COM" domain.

Enter the user name: bukedj0a

Enter the password:

Warning: An account by this name already exists in Active Directory at
CN=ECCNAS7,OU=NON Windows Systems,OU=EXPEC,OU=Migration
Production,DC=aaa,DC=com.
If there is an existing DNS entry for the name ECCNAS7, it must be
removed. Data ONTAP cannot remove such an entry.
Use an external tool to remove it after this command completes.
Ok to reuse this account? {y|n}: y

Error: Machine account creation procedure failed
[ 500] Loaded the preliminary configuration.
[ 503] Successfully connected to ip 10.4.94.180, port 88 using
TCP
[ 514] Successfully connected to ip 10.4.94.180, port 389 using
TCP
[ 520] Account 'ECCNAS7' already exists in the 'AAA.COM'
domain
**[ 521] FAILURE: Could not rename existing account
** 'CN=ECCNAS7,OU=NON Windows Systems,OU=EXPEC,OU=Migration
** Production,DC=aaa,DC=com' to
** 'cn=ECCNAS7,cn=computers,dc=aaa,dc=com': Insufficient
** access

Error: command failed: Failed to create the Active Directory machine account
"ECCNAS7". Reason: LDAP Error: The user has insufficient access rights.

ECC_MCC_2::>

3/19/2018 14:33:41 cdcnas7 DEBUG secd.unexpectedFailure: vserver (cdc_vs1) Unexpected failure. Error: Machine account creation procedure failed
[ 470] Loaded the preliminary configuration.
[ 475] Successfully connected to ip 10.4.94.180, port 88 using TCP
[ 487] Successfully connected to ip 10.4.94.180, port 389 using TCP
[ 492] Account 'CDCNAS7' already exists in the 'AAA.COM' domain
**[ 492] FAILURE: Could not rename existing account 'CN=cdcnas7,OU=NON Windows Systems,OU=EXPEC,OU=Migration Production,DC=aaa,DC=com' to 'cn=CDCNAS7,cn=computers,dc=aaa,dc=com': Insufficient access

We tried by deleting the object from Domain Controller first and tried again but we are still getting almost same error. Intrestingly we tried with multiple users who have full permission on that OU and can create OU and machine accounts on Domain Controller but couldnt join.

Could someone please help..

Thanks in advance.

Arsalan

Apologies if i am in the wrong area however i am in need of some assistance and wondered if you would be able to help. 

I have recently picked up a couple of old NetApp SANS to work on.  NOw I know these are old however i would like to utilise them.  

A collegue started working on these and he got so far configuring them but didnt get any further.  

The device is a FAS2050 (As i stated i know they are old) running NetApp Release 7.3.7P1.

The NetApp has 2 controllers, one has been configured and i can jumpt ont the san using this.

The other controller i believe was partly configured but i believe he clustered these together.  using the GUI i can see only 1 controller that is allowing me access.  If i view the partner via SSH I can see the name of the other controller so i know my collegue has done some of the configuration but i can SSH to the other Controller. 

My Questions are as follows. 

1. If I wanted to reconfigure the network settings for this controller how could i do this given i cant get onto it via the other controller to make it happen?  do i need to console directly onto the controler ?

2. is there a simle command i can enter to specifically list what has been configured from a network perspective on this controller i am having an issue with?   How can i change the network configuration of this controller if i cant access it? Is there a command i can use to jump accross to the other controller whilst SSH ing into the functioning one?  (or would this be a console cable requirement?)  

3.  If i wanted to factory reset this device how could i do it or is there a Command line OnTap that i could stp though or fire up in order to reconfigure this device.  

4. Lasty I had 3 Aggregates on this box,  I can only see Aggregates 1 and 2 but 3 is missing but i can see that it is is till functioning but is it missing from the GUI.  Reason for this? 

Apologies if the Questions i have asked are obvious but i am just starting out on NetApps though this would be a good piece of tin to play around on.  (IT IS NOT PRODUCTION before anyone asks )

I thank you for your time and any assistance you can give i would apprecieate it.  

Many thanks. 

This maybe a simple question.  I have an old FAS2050 i am playing around with.  It has 20x 300GB disks in it.  however an aggregate has been created utilising 9 disks.  RAID-DP has been used and i know 2 of the disks will be used for parity.  

My query is this.

When i am in the oncommand system manager i can see under disks all of the disks that have been used to create the aggregate all them have an effective size of 265.63.  The remaining disks  all of the other have an effective size of 0bytes is this right?

if i try to create a new aggregate on this san i get the error you do not have sufficient disks to create a 'RAID-DP' aggregate.

Is it because these other drives are faulty which is why they are not reporting a size?

Apologies is this is a stupid question but if you dont ask you will never know. 

Cheers. 

In SPM tool , if I disable or enable the option "Degrded Performance" in hardware setting, what is the difference between output ?

what kind of performance was degraded and what happend if I enable degraded performance ?

Many thanks  

Hi there.

I've stuck with a problem that I don't know how to solve...

I'm trying to create another user to manage my cluster, I use this command:

 security login create -user-or-group-name someuser -application http -authentication-method password -role admin -is-ns-switch-group no -second-authentication-method none -vserver CLUSTER

Where CLUSTER is my cluster management SVM name and someuser is the login I want to create.

It asks for creating a password for someuser, which I did.

I then create also ssh access for that same user:

security login create -user-or-group-name someuser -application ssh -authentication-method password -role admin -is-ns-switch-group no -second-authentication-method none -vserver CLUSTER

SSH works without problem.

When I try to login in the HTTP management portal, it keep asking for authentication...

Can someone give me some advice on this?

Hello,

is there an API call performing the same functionality as command "vserver show"  ? Or better, " vserver show -instance". I'm playing with Netapp SDK 9.3 ZExplorer but can't find it.

Thanks!

Hi,

Customer has multiple ip adress and vlan  in their svm just one of them can reach ad server and dns. Client using other lifs to connect cifs shares but sometimes cifs connections droping.

My quesiton is, the other lifs which can not reach ad  and dns is causing this problem or not ? When I check logs it says this ip adress (other lifs)  can not reach this dns and adress secd.conn.auth.failure.

Thanks,

Tuncay

Hello,

I notice a conspicuousness that a Snapmirror connection does not come over 300 MBs. Both systems FAS8200 & Fas8080 are connected with 40 GBits via a LACP. Bottlenecks in the network are excluded and the hard disks are at 10-20% utilization.
Is there an option which controls this?

Snapmirror throttle is unlimited. Currently ONTAP 9.1P7

Many Thanks
Dennis

Since upgrading to ONTAP 9.3, OCUM reports "Cluster not reachable" off and on. OCUM throws out a "cluster not reachable" alert (new) which immediately goes away (obsolete) every 10-15 minutes. Pinging the cluster shows that the mgmt interface is not even skipping a beat. OCUM says pairing status is bad. This has occured on two FAS systems now as soon as we upgrade from 9.1 to 9.3P2

OCUM 6.4P1 and OCUM 7.3 see the same behavior. (we are in OCUM version transition)

Anyone else run into this?

Hi all, I I'm trying to setup an AD connection in order to domain authenticate cluster admins and I have 2x CDOT 8.2.2 clusters which time out when on the command 'vserver active-directory create'.  CIFS is not licensed so I cannot use a CIFS vserver.  The commands I'm using (below) work perfectly on other clusters running newer versions of OnTap (9.1 or 9.2).  Since the same commands exist on 8.2.2 I'm assuming this is supposed to work, but not sure what the problem is.

After I run the command, AD logs confirm the connection without errors and in fact show the new account in the Computers OU.  If I run the command a second time OnTap tells me that the account already exists and asks if I want to reuse it, but then upon answering YES the command still times again with the same error.  Thus, I know the cluster is talking to the local domain controller and I don't know why it is failing.  Any advice would be appreciated - thanks!  See CLI output below:

san901-cluster::> domain-tunnel show
(security login domain-tunnel show)
Tunnel Vserver: ldap_svm

san901-cluster::> vserver active-directory create -vserver ldap_svm -domain xxx.xxxx -account-name san901-cluster

In order to create an Active Directory machine account, you must supply the name and password of a Windows account with sufficient privileges to add computers to the "CN=Computers" container within the
"xxxx" domain.

Enter the user name: xxxxx

Enter the password:

Warning: An account by this name already exists in Active Directory at CN=SAN901-CLUSTER,CN=Computers,DC=xxx,DC=xxxx
Ok to reuse this account? {y|n}: y

Error: command failed: Failed to create the Active Directory machine account "SAN901-CLUSTER". Reason: ad_machine_account_create: RPC: Timed out; ct = 0x826104800 rem_addr = 127.0.0.1:655.

san901-cluster::> vserver active-directory show
This table is currently empty.

Hi all,

I have a question, if I already purchased SupportEdge Premium Support for 4 years for Hardware.  Do I need to purchase the support separately for software like ONTAP? or is that already included with the hardware?

Thanks,

Ateeq

With ONTAP 9.3 is there a maximum number of quotas that can be set on a volume? On a node?

Thanks

kd

Hello,

I have setup a 2 node cluster across 2 VM's - I attempt to SSH into the mgmt interface via PuTTY and I receive "Error: Connection Refused" - I am able to ping the address assigned to mgmt interface. I am using the admin account and as far as I Know the access rights for SSH are enabled by default? is there somthing else I must to do in order to SSH to this?

any help/advice is appreciated.

Thanks

Hello,

I'm brand new to NetApp technology, but have been doing research.  My organization does all of it's file shares from a NetApp device using ONTAP for offline files.  Recently we discovered that when users were coming back to the network after saving files while offline, tmp files were being created when they re-joined the network; BEFORE sync center runs a sync.  The files are names with the same name as the original file with the addition of "~RFf1eba.TMP" (just an example, its random).  When a sync is performed, Sync Center sees a confilict as if the user had deleted the original file while offline.  If Sync Center is instructed to keep the file, the changes are updated, but the TMP file remains.  I'm happy to provide any information to assist in the solution of this issue.  I've already done hours of troubleshooting and can provide much more detail if requested.

Thanks in advance!

First, some context/background. We have a single 4-node cluster, all AFF, running OnTAP 9.2P2, with every volume configured to thin provision and autogrow (but not autoshrink).

I discovered today that the autosize-grow-threshold-percent volume setting is not fully conforming anymore to the standards discussed in these forums several years ago.

Specifically, the following post lists the point at which volumes of different sizes will trigger autogrow events. I have used this for years to determine when to alert on low volume space.

http://community.netapp.com/t5/OnCommand-Storage-Management-Software-Discussions/Controlling-autosize-threshold/td-p/70310 

The following KB article further clarifies that in Data OnTAP 8.2, those settings are still the same but administrators can now change them on a volume by volume basis:

https://kb.netapp.com/app/answers/answer_view/a_id/1028424

Today I ran the following command. Based on the above articles, I should have had 0 results (I have never manually chnaged the autogrow settings for a volume), however I found 74 volumes that were using autosize-grow-threshold-percent settings higher than 85%. Some were 90%, some 92%, some 95%. There were 127 volumes at 85% as I expected.

-----------------------------------------------------------------------------------

volume show -fields size,autosize-grow-threshold-percent -size <=20GB -autosize-grow-threshold-percent >85

-----------------------------------------------------------------------------------

Does anyone know if this behavior has changed in 9.2? I can't find a different version of the KB shown above for 9.2, or any other documentation about changes.

Hi all,

I have a problem after each reboot of my fas.

On this controleur i have 2 LTO6 connected directly with a FC, after each reboot one of the 2 drive don't mount.

I have used this command "storage disable adapter 0c" and after enable and i have yhis message =

fci.link.error:error]: Could not recover link on Fibre Channel adapter 0c after 30 seconds. Offlining the adapter

For the other fc it's ok when i enable the FC is going to online.

I have read somewhere that we need to reset the esh modul but i have found nothing to do that.

Do you have an idea?

Thanks

regards

stephane

Hello Team,

How can we check the size of the syslog file in Netapp 7 and C-mode.