Installation
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 22 Connection to "192.168.1.1" on port "22" is ok $ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 80 Connection to "192.168.1.1" on port "80" is ok
# su - stor2rrd # (use lpar2rrd user on the Appliance) $ ls -l ~/.ssh/id_rsa.pub $ ssh-keygen -t rsa -N "" Generating public/private rsa key pair. Enter file in which to save the key (/home/stor2rrd/.ssh/id_rsa): ... $ ls -l ~/.ssh/id_rsa.pub -rw-r--r-- 1 stor2rrd stor2rrd 382 Jun 1 12:47 /home/stor2rrd/.ssh/id_rsa.pub
Cmode::> security login role create -role monitor -cmddirname DEFAULT -access readonly Cmode::> security login role create -role monitor -cmddirname set -access all Cmode::> security login role create -role monitor -cmddirname statistics -access all # You can check the role you've just created Cmode::> security login role show -role monitor Role Command/ Access Vserver Name Directory Query Level ---------- ------------- --------- ----------------------------------- -------- xorux monitor DEFAULT readonly xorux monitor set all xorux monitor statistics all 3 entries were displayed. # Create stor2rrd user, enable SSH, ONTAPI Cmode::> security login create -username stor2rrd -role monitor -application ssh -authmethod password Cmode::> security login create -username stor2rrd -role monitor -application ontapi -authmethod password Cmode::> security login create -username stor2rrd -role monitor -application ssh -authmethod publickey # Assign stor2rrd user for monitoring role Cmode::> security login modify stor2rrd -role monitor *
Cmode::> security login show Authentication Acct Is-Nsswitch User/Group Name Application Method Role Name Locked Group ---------------- ----------- --------- ---------------- ------ ----------- stor2rrd ontapi password monitor no no stor2rrd ssh password monitor no no stor2rrd ssh publickey monitor - no
$ cat ~/.ssh/id_rsa.pub ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu7y41DTAqJwqA4KJfZQWiqU7IMbs8lbK0nvDgZ9dMWmd3l+uawDKxkUdvnRUxBrLqGrxHZx3CjcLoNDqvlFl0AKE3DRTmv6o7plD3b1jRwsCABpNob5knZ/A3E4uVWytJPz036zjkn4vUSrGKJon3oUgLkmtSJoT2FCLvmPbYONPEqs+tQ/yCCkIpVcZwCxwPCbC7nnuuXhjMmRQNzNooREgBHr4eUWr3rlUPNxsSBjg6Mcbfb3u3O9+e49KJKUvMoD40AULW3h3j6bJ6bTTyhKavETpnkryeEq3936oVJdKdd4noraR54rK8lLrErFYgAG8ugLrxzmOYt6dN1phb
$ ssh-keygen -t ecdsa -b 521
Cmode::> security login publickey create -username stor2rrd -publickey "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu7y41DTAqJwqA4KJfZQWiqU7IMbs8lbK0nvDgZ9dMWmd3l+uawDKxkUdvnRUxBrLqGrxHZx3CjcLoNDqvlFl0AKE3DRTmv6o7plD3b1jRwsCABpNob5knZ/A3E4uVWytJPz036zjkn4vUSrGKJon3oUgLkmtSJoT2FCLvmPbYONPEqs+tQ/yCCkIpVcZwCxwPCbC7nnuuXhjMmRQNzNooREgBHr4eUWr3rlUPNxsSBjg6Mcbfb3u3O9+e49KJKUvMoD40AULW3h3j6bJ6bTTyhKavETpnkryeEq3936oVJdKdd4noraR54rK8lLrErFYgAG8ugLrxzmOYt6dN1phb" -comment STOR2RRD
$ ssh stor2rrd@192.168.1.1 Cmode::>
Cmode::> system services web show External Web Services: true Status: online HTTP Protocol Port: 80 HTTPS Protocol Port: 443 HTTP Enabled: true
Cmode::> firewall policy show -policy mgmt -instance -service http,https Vserver Name: Cmode Policy: mgmt Service: http Allowed IPs: 0.0.0.0/0 IPspace: Default Vserver Name: Cmode Policy: mgmt Service: https Allowed IPs: 0.0.0.0/0 IPspace: Default Cmode::> net int show -vserver Cmode -lif cluster_mgmt --> interfaces must have: Firewall Policy: mgmt
$ df -g /home # AIX $ df -h /home # Linux
$ cd /home/stor2rrd/stor2rrd $ ./bin/config_check.sh ===================================== STORAGE: cmode-storage-alias : NetApp ===================================== connection ok
$ crontab -l | grep load_netappperf.sh $
$ crontab -e # NetApp FAS : C-mode & 7-mode (same code, use it just once) 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_netappperf.sh > /home/stor2rrd/stor2rrd/load_netappperf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 8443 Connection to "192.168.1.1" on port "8443" is ok
$ df -g /home # AIX $ df -h /home # Linux
$ crontab -l | grep load_ds5perf.sh $
$ crontab -e # NetApp E-series (use same script load_ds5perf.sh as IBM DS3000/DS4000/DS5000) 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_ds5perf.sh > /home/stor2rrd/stor2rrd/load_ds5perf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
# lslpp -L |egrep "X11.adt|X11.base|X11.motif" X11.adt.bitmaps 6.1.0.0 C F AIXwindows Application X11.adt.ext 6.1.6.0 C F AIXwindows Application X11.adt.imake 6.1.6.0 C F AIXwindows Application X11.adt.include 6.1.4.0 C F AIXwindows Application X11.adt.lib 6.1.2.0 C F AIXwindows Application X11.adt.motif 6.1.6.0 C F AIXwindows Application X11.base.common 6.1.0.0 C F AIXwindows Runtime Common X11.base.lib 6.1.6.0 C F AIXwindows Runtime Libraries X11.base.rte 6.1.6.0 C F AIXwindows Runtime Environment X11.base.smt 6.1.6.0 C F AIXwindows Runtime Shared X11.base.xpconfig 6.1.0.0 C F Xprint Configuration Files X11.motif.lib 6.1.6.0 C F AIXwindows Motif Libraries X11.motif.mwm 6.1.6.0 C F AIXwindows Motif Window
# /opt/IBM_DS/Uninstall\ IBM\ System\ Storage\ DS\ Storage\ Manager\ 10/Uninstall\ IBM\ System\ Storage\ DS\ Storage\ Manager\ 10
# umask 022 # chmod 775 SMIA-LINUXX64-11.30.0A00.0010.bin # ./SMIA-LINUXX64-11.30.0A00.0010.bin -i console Please choose the Install Set to be installed by this installer. 1- Typical (Full Installation) --> 2- Management Station 3- Host 4- Customize... ENTER THE NUMBER FOR THE INSTALL SET, OR PRESS <ENTER> TO ACCEPT THE DEFAULT : 2 ...... Installation Complete --------------------- Congratulations. SANtricity has been successfully installed to: /opt/StorageManager # ls -lL /usr/bin/SMcli -rwxr-xr-x 1 root root 1108 Oct 14 21:44 /usr/bin/SMcli
# SMmonitor stop # rmitab smmonitor
# /opt/SMgr/client/SMmonitor stop # chkconfig --list SMmonitor # chkconfig --level 2345 SMmonitor off alternatively: # rm -f /etc/rc2.d/S99SMmonitor /etc/rc.d/init.d/SMmonitor
# systemctl stop smmonitor.service # systemctl disable smmonitor.service
# rm -f /var/opt/SM/emwdata_v04_bin.lock /var/opt/SM/pref_01_bin.lock /var/opt/SM/PMServer.lock # chown stor2rrd /opt/SMgr/client/SMcli /var/opt/SM/prefbackup_01.bin # chown stor2rrd /var/opt/SM/emwback_v04.bin /var/opt/SM /var/opt/SM/emwdata_v04.bin # chown stor2rrd /var/opt/SM /var/opt/SM/pref_01.bin # chmod -f 644 /usr/SMgr/jre/lib/security/java.security /usr/SMruntime/jre/lib/security/java.security # chmod -f 755 /opt/SMgr/client/lib/*
# su - stor2rrd # (lpar2rrd user on the Virtual Appliance) $ SMcli -d An internal error, error code 12, has occurred. This is possibly due to initialization problems when loading the necessary internal files. Please check your installation of the storage management client. If problems continue to persist, re-install the storage management client.
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 2463 Connection to "192.168.1.1" on port "2463" is ok
# su - stor2rrd # (lpar2rrd user on the Virtual Appliance) $ SMcli -d There are currently no storage subsystems listed in the configuration file. Add storage subsystems using the Add Storage Subsystem option in the storage management software or by command line. $ SMcli -A 192.168.1.1 192.168.1.2 New storage subsystem was discovered at address 192.168.1.1 New storage subsystem was discovered at address 192.168.1.2 SMcli completed successfully $ SMcli -d E5500-01 ControlerA_hostname ControlerB_hostname
$ SMcli -n E5500-01 -e -c "show hostTopology;"
$ SMcli -n E5500-01 -e -c "show hostTopology;" The operation needs either the 'Administrator' or 'Monitor' password to be set. $ SMcli -n E5500-01 -p <password> -R monitor -e -c "show hostTopology;"
$ df -g /home # AIX $ df -h /home # Linux
$ cd /home/stor2rrd/stor2rrd $ ./bin/config_check.sh E5500-01 ======================= STORAGE: E5500-01: DS5K ======================= /usr/SMclient/SMcli -n E5500-01 -e -c "storageSubsystem summary;" connection ok
$ SMcli -n E5500_01 -e -c "show hostTopology;" Warning! No Monitor password is set for the storage subsystem.
E5500_01:DS5K:monitor:password01:
$ ./bin/config_check.sh E5500_01 ...
$ crontab -l | grep load_ds5perf.sh $
$ crontab -e # NetApp E-series (use same script load_ds5perf.sh as IBM DS3000/DS4000/DS5000) 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_ds5perf.sh > /home/stor2rrd/stor2rrd/load_ds5perf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 22 Connection to "192.168.1.1" on port "22" is ok $ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 80 Connection to "192.168.1.1" on port "80" is ok
# su - stor2rrd # (use lpar2rrd user on the Appliance) $ ls -l ~/.ssh/id_rsa.pub $ ssh-keygen -t rsa -N "" Generating public/private rsa key pair. Enter file in which to save the key (/home/stor2rrd/.ssh/id_rsa): ... $ ls -l ~/.ssh/id_rsa.pub -rw-r--r-- 1 stor2rrd stor2rrd 382 Jun 1 12:47 /home/stor2rrd/.ssh/id_rsa.pub
# perf monitoring role - login via ssh / http API, stats, some API commands (aggr-list-info, volume-list-info...) 7mode> useradmin role add monitor -a cli-stats,cli-man,cli-?,cli-rdfile,cli-sysconfig,login-ssh,login-http-admin,api-aggr-list-info,api-volume-list-info,api-disk-list-info,api-lun-list-info,api-diagnosis-status-get,api-perf-* # group with role 7mode> useradmin group add Monitor -r monitor # user in group 7mode> useradmin user add stor2rrd -g Monitor # check if SSH is enabled, public keys can be used and your guest has ssh access: # If these values are set in a different way, a secureadmin setup should be done # If ssh.access contains list of host then add your STOR2RRD host there 7mode> options ssh ssh.access * ssh.enable on ssh.pubkey_auth.enable on ssh2.enable on # check trusted hosts list, there should be * by default or add to the list STOR2RRD host 7mode> options trusted options trusted.hosts * # In OnTap 8 and later, you must explicitly enable HTTP access for the API: 7mode> options httpd.admin.enable on
Invalid capabilities: api-diagnosis-status-get Could not modify role <monitor>. Error: Invalid capability
7mode> useradmin role add monitor -a cli-stats,cli-man,cli-?,cli-rdfile,cli-sysconfig,login-ssh,login-http-admin,api-aggr-list-info,api-volume-list-info,api-disk-list-info,api-lun-list-info,api-perf-*
7mode> exportfs /vol/vol0 -sec=sys,rw,root=192.168.1.53,nosuid ...
# mount netapp-7mode:/ /mnt # cat /home/stor2rrd/.ssh/id_rsa.pub >> /mnt/etc/sshd/stor2rrd/.ssh/authorized_keys2 # umount /mnt
# su - stor2rrd (lpar2rrd on the Virtual Appliance) $ ssh stor2rrd@192.168.1.1 7mode>
$ vi /home/stor2rrd/stor2rrd/etc/storage-list.cfg 7mode-storage-alias:NETAPP:7MODE:192.168.1.1:22:443:1:stor2rrd:KT4mXVI9N0BUPjZdVQo=
$ df -g /home # AIX $ df -h /home # Linux
$ cd /home/stor2rrd/stor2rrd $ ./bin/config_check.sh ===================================== STORAGE: 7mode-storage-alias : NetApp ===================================== connection ok
$ crontab -l | grep load_netappperf.sh $
$ crontab -e # NetApp FAS : C-mode & 7-mode (same code, use it just once) 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_netappperf.sh > /home/stor2rrd/stor2rrd/load_netappperf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 443 Connection to "192.168.1.1" on port "443" is ok
$ df -g /home # AIX $ df -h /home # Linux
$ crontab -l | grep load_solidfireperf.sh $
$ crontab -e # NetApp SolidFire 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_solidfireperf.sh > /home/stor2rrd/stor2rrd/load_solidfireperf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 443 Connection to "192.168.1.1" on port "443" is ok
$ df -g /home # AIX $ df -h /home # Linux
$ crontab -l | grep load_storagegridperf.sh $
$ crontab -e # NetApp StorageGRID 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_storagegridperf.sh > /home/stor2rrd/stor2rrd/load_storagegridperf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh
$ perl /home/stor2rrd/stor2rrd/bin/conntest.pl 192.168.1.1 443 Connection to "192.168.1.1" on port "443" is ok
# Create stor2rrd user, enable REST API access Cmode::> security login create -username stor2rrd -role readonly -application http -authmethod password Cmode::> security login show -user-or-group-name stor2rrd Second User/Group Authentication Acct Authentication Name Application Method Role Name Locked Method -------------- ----------- ------------- ---------------- ------ -------------- stor2rrd http password readonly no none
Or you can use ONTAP System Manager to do the same:
Cmode::> system services web show External Web Services: true Status: online HTTP Protocol Port: 80 HTTPS Protocol Port: 443 HTTP Enabled: true
Cmode::> firewall policy show -policy mgmt -instance -service http,https Vserver Name: Cmode Policy: mgmt Service: http Allowed IPs: 0.0.0.0/0 IPspace: Default Vserver Name: Cmode Policy: mgmt Service: https Allowed IPs: 0.0.0.0/0 IPspace: Default Cmode::> net int show -vserver Cmode -lif cluster_mgmt --> interfaces must have: Firewall Policy: mgmt
$ df -g /home # AIX $ df -h /home # Linux
$ cd /home/stor2rrd/stor2rrd $ ./bin/config_check.sh ===================================== STORAGE: cmode-storage-alias : NetApp ===================================== connection ok
$ crontab -l | grep load_netappperf.sh $
$ crontab -e # NetApp FAS : C-mode, 7-mode, REST API (same code, use it just once) 0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/stor2rrd/stor2rrd/load_netappperf.sh > /home/stor2rrd/stor2rrd/load_netappperf.out 2>&1
$ crontab -e # STOR2RRD UI (just ONE entry of load.sh must be there) 5 * * * * /home/stor2rrd/stor2rrd/load.sh > /home/stor2rrd/stor2rrd/load.out 2>&1
$ cd /home/stor2rrd/stor2rrd $ ./load.sh