Friday, May 16, 2025

NetApp cluster mode internal file path

 

Please find internal folders for various files as below in NetApp filer this is just for our future reference :-

  • ONTAP image files are located in /mroot/etc/software
  • Cluster image repository are located in /mroot/etc/NDU/store/
  • Core files are located in /mroot/etc/crash
  • Cluster configuration backup files are located in /mroot/etc/backups/config
  • For BIOS, put the zip file in the directory /mroot/etc/software
  • Disk firmwares are located in /mroot/etc/disk_fw
  • SP / BMC firmwares are located in /mroot/etc/sp_fw
  • Shelf module firmwares are located in /mroot/etc/shelf_fw

NetApp CIFS server and share setup

 
netapp01::> vserver create -vserver Veeam_Mgmt_720 -subtype default -rootvolume Veeam_Mgmt_720_root -aggregate aggr_data_netapp01_01_sas_01 -rootvolume-security-style ntfs -language C.UTF-8 -snapshot-policy default
[Job 20446] Job succeeded:
Vserver creation completed.

netapp01::> vserver show-protocols -vserver Veeam_Mgmt_720

  Vserver: Veeam_Mgmt_720
Protocols: cifs

netapp01::> vlan create -node netapp01-01 -vlan-name a0a-720
netapp01::> vlan create -node netapp01-02 -vlan-name a0a-720
netapp01::> vlan show
                 Network Network
Node   VLAN Name Port    VLAN ID  MAC Address
------ --------- ------- -------- -----------------
netapp01-01
       a0a-320
                 a0a     320      X:X:X:25:b2:bb
       a0a-332
                 a0a     332      X:X:X:25:b2:bb
       a0a-720
                 a0a     720      X:X:X:25:b2:bb
netapp01-02
       a0a-320
                 a0a     320      X:X:X:25:ca:b8
       a0a-332
                 a0a     332      X:X:X:25:ca:b8
       a0a-720
                 a0a     720      X:X:X:25:ca:b8
6 entries were displayed.

netapp01::> broadcast-domain create -broadcast-domain bcast_vlan-720 -mtu 9000 -ports netapp01-01:a0a
  (network port broadcast-domain create)

netapp01::> ipspace create -ipspace ips_test_cifs_01
  (network ipspace create)

netapp01::> net int create -vserver Veeam_Mgmt_720 -lif lif_cifs_720_01 -service-policy default-data-files -address 192.168.1.12 -netmask 255.255.255.0 -home-node netapp01-01 -home-port a0a-720 -status-admin up -failover-policy system-defined -firewall-policy data -auto-revert false -failover-group bcast_vlan-720 -is-dns-update-enabled true
  (network interface create)

netapp01::> net int show
  (network interface show)
            Logical    Status     Network            Current       Current Is
Vserver     Interface  Admin/Oper Address/Mask       Node          Port    Home
----------- ---------- ---------- ------------------ ------------- ------- ----
Cluster
            netapp01-01_clus1
                         up/up    169.254.164.123/16 netapp01-01 e0a     true
            netapp01-01_clus2
                         up/up    169.254.55.111/16  netapp01-01 e0b     true
            netapp01-02_clus1
                         up/up    169.254.90.2/16    netapp01-02 e0a     true
            netapp01-02_clus2
                         up/up    169.254.237.246/16 netapp01-02 e0b     true
Veeam_Mgmt_720
            lif_cifs_720_01
                         up/up    192.168.1.12/24   netapp01-01 a0a-720 true
netapp01
            cluster_mgmt up/up    192.168.1.70/28     netapp01-01 e0M     true
            netapp01-01_mgmt
                         up/up    192.168.1.71/28     netapp01-01 e0M     true
            netapp01-02_mgmt
                         up/up    192.168.1.73/28     netapp01-02 e0M     true
svm_test_01
            lif_file_320_01
                         up/up    172.16.2.200/26    netapp01-01 a0a-320 true
            lif_file_332_01
                         up/up    192.168.101.9/27   netapp01-01 a0a-332 true
            lif_file_332_02
                         up/up    192.168.101.11/27  netapp01-02 a0a-332 true
            lif_file_332_03
                         up/up    192.168.101.8/27   netapp01-02 a0a-332 true
            lif_file_332_04
                         up/up    192.168.101.10/27  netapp01-01 a0a-332 true
13 entries were displayed.

netapp01::> vserver rename -vserver Veeam_Mgmt_720 newname svm_test_cifs_01





netapp01::> cifs create -vserver svm_test_cifs_01 -cifs-server cifsserver -domain test.biz -ou "OU=EMEA,OU=FPS,OU=SRV,DC=test,DC=biz"

In order to create an Active Directory machine account for the CIFS server, you must supply the name and password of a Windows
account with sufficient privileges to add computers to the "OU=EMEA,OU=FPS,OU=SRV,DC=test,DC=biz" container within the "test.BIZ"
domain.

Enter the user name: test-129

Enter the password:

Notice: SMB1 protocol version is obsolete and considered insecure. Therefore it is deprecated and disabled on this CIFS server.
Support for SMB1 might be removed in a future release. If required, use the (privilege: advanced) "vserver cifs options modify
-vserver svm_test_cifs_01 -smb1-enabled true" to enable it.

netapp01::> cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm_test_cifs_01
            testserver up        test            domain

netapp01::> cifs share show
Vserver        Share         Path              Properties Comment  ACL
-------------- ------------- ----------------- ---------- -------- -----------
svm_test_cifs_01                              oplocks             BUILTIN\Administrators / Full Control
               c$            /                 browsable  -
                                               changenotify
                                               show-previous-versions
svm_test_cifs_01                              browsable
               ipc$          /                            -        -
2 entries were displayed.

netapp01::> vol create -vserver svm_test_cifs_01 -volume SQL_Backup -aggregate aggr_data_netapp01_02_sata_01 -size 10t -state online -snapshot-policy default -foreground true -tiering-policy none -analytics-state off -activity-tracking-state off -anti-ransomware-state disabled -space-guarantee none -security-style ntfs                                                          
[Job 20499] Job succeeded: Successful


test\test RW
test\test1 RW

test\test2  Read only
test\test3 Read only
 
 
vserver cifs share access-control create -vserver svm_test_cifs_01 -share SQL_Backup -user-or-group test\test1 -user-group-type windows -permission Read

netapp01::> vol create -vserver svm_test_cifs_01 -volume SQL_Backup -aggregate aggr_data_netapp01_02_sata_01 -size 10t -state online -snapshot-policy default -foreground true -tiering-policy none -analytics-state off -activity-tracking-state off -anti-ransomware-state disabled -space-guarantee none -security-style ntfs                                                          
[Job 20499] Job succeeded: Successful                                                                                              


netapp01::> volume mount -vserver svm_test_cifs_01 -volume SQL_Backup -junction-path /SQL_Backup

Warning: The export-policy "default" has no rules in it. The volume will therefore be inaccessible over NFS and CIFS protocol.
Do you want to continue? {y|n}: y


netapp01::> volume mount -vserver svm_test_cifs_01 -volume SQL_Backup -junction-path /SQL_Backup    

Warning: The export-policy "default" has no rules in it. The volume will therefore be inaccessible over NFS and CIFS protocol.
Do you want to continue? {y|n}: y
                                                                                                                                   

netapp01::> cifs share create -vserver svm_test_cifs_01 -share-name SQL_Backup -path /SQL_Backup

netapp01::> cifs share show
Vserver        Share         Path              Properties Comment  ACL
-------------- ------------- ----------------- ---------- -------- -----------
svm_test_cifs_01                              oplocks             BUILTIN\Administrators / Full Control
               c$            /                 browsable  -
                                               changenotify
                                               show-previous-versions
svm_test_cifs_01                              browsable
               ipc$          /                            -        -
svm_test_cifs_01                              oplocks             Everyone / Full Control
               SQL_Backup    /SQL_Backup       browsable  -
                                               changenotify
                                               show-previous-versions
3 entries were displayed.


netapp01::> vserver cifs share access-control create -vserver svm_test_cifs_01 -share SQL_Backup -user-or-group test\test129 -user-group-type windows -permission Full_Control

netapp01::> cifs share show                                                                                                       Vserver        Share         Path              Properties Comment  ACL
-------------- ------------- ----------------- ---------- -------- -----------
svm_test_cifs_01                              oplocks             BUILTIN\Administrators / Full Control
               c$            /                 browsable  -
                                               changenotify
                                               show-previous-versions
svm_test_cifs_01                              browsable
               ipc$          /                            -        -
svm_test_cifs_01                              oplocks             test\test-129 / Full Control
               SQL_Backup    /SQL_Backup       browsable  -        Everyone / Full Control
                                               changenotify
                                               show-previous-versions
3 entries were displayed.

netapp01::> vserver cifs share access-control create -vserver svm_test_cifs_01 -share SQL_Backup -user-or-group test\test2-G -user-group-type windows -permission Full_Control

netapp01::> vserver cifs share access-control create -vserver svm_test_cifs_01 -share SQL_Backup -user-or-group test\test3-G -user-group-type windows -permission Full_Control

netapp01::> cifs share show                                                                                                       Vserver        Share         Path              Properties Comment  ACL
-------------- ------------- ----------------- ---------- -------- -----------
svm_test_cifs_01                              oplocks             BUILTIN\Administrators / Full Control
               c$            /                 browsable  -
                                               changenotify
                                               show-previous-versions
svm_test_cifs_01                              browsable
               ipc$          /                            -        -
svm_test_cifs_01                              oplocks             test\test2 / Full Control
               SQL_Backup    /SQL_Backup       browsable  -        test\test3-G / Full Control
                                               changenotify        test\test4-129 / Full Control
                                               show-previous-versions
                                                                   Everyone / Full Control
3 entries were displayed.

netapp01::> cifs show
            Server          Status    Domain/Workgroup Authentication
Vserver     Name            Admin     Name             Style
----------- --------------- --------- ---------------- --------------
svm_test_cifs_01
            testserver    up        test            domain

Tuesday, April 16, 2024

Brocade Health Check commands

 Below are the commands to check brocade switch health for daily monitoring purpose.


psshow It shows power supplies status

fanshow It shows fan status

tempshow It displays internal temperature readings

sensorshow It displays all sensors readings (power supplies, fans, temperature sensors)

porterroshow It displays all FC ports errors

switchstatusshow Shows overall switch status (healthy or marginal)

switchstatuspolicyshow Shows configured policies to decide whether the switch is healthy or mariginal

errshow It displays the error log of the switch



Thursday, February 8, 2024

How to delete blocked ips from Hitachi HNAS

 


If SMB Barring is disabled globally, the entire HNAS can get blocked by the DCs if there are too many incorrect login attempts from a single user.  This new feature allows the HNAS to block incorrect NTLM requests and not pass them on to the DC(s) for authentication if there are too many failed login attempts and allows all other SMB clients to continue access to the HNAS if they have valid login credentials.

Objective

Starting with Hitachi NAS code version 13.9.6918.02, HNAS Engineering introduced a new feature called smb-auto-barring, along with some other SMB barring commands (which are used for manual SMB client barring): 


console-context --evs 2


   smb-barred-client-add

   smb-barred-client-remove
   smb-barred-client-clear
   smb-barred-client-list

smb-barred-client-remove 10.x.45.x

Wednesday, February 7, 2024

How to collect unexported lun info in HP3PAR.

 as there is no command to collect unexported luns info in HP3PAR.


first collect all luns in excel

showvv

then collect all mapped luns in excel.

showvv --host "*"

then do vlookup

and verify luns which are not matched.