AvailabilityGuard can collect NetApp storage systems (Filers and Clusters) configuration data by using one of the following methods:
- Querying NetApp OnCommand Unified Manager Core (previously known as DFM) - recommended.
- Querying NetApp storage systems directly.
Querying NetApp OnCommand Unified Manager Core
AvailabilityGuard collects configuration data regarding NetApp Filers and Clusters using OnCommand Unified Manager Core ("DFM"). It uses the DFM as a proxy to run read-only commands on the NetApp Filers/Clusters with the ZAPI API.
To scan OnCommand Unified Manager, you should make the following preparations:
- Obtain OnCommand Unified Manager Name or IP address.
- Obtain a OnCommand user account profile with a Storage Administrator role.
- Each NetApp Filer/Cluster which is scanned using DFM must have a valid login and password defined in OnCommand Unified Manager. This login should have capabilities as defined under "Querying NetApp storage systems directly" below.
- You should also verify that IP connectivity through HTTP (default is port 8088) or HTTPS (default is port 8488) is available between the AvailabilityGuard collector server and the OnCommand Unified Manager.
Querying NetApp storage systems directly
AvailabilityGuard collects configuration data regarding NetApp files and clusters by connecting NetApp storage systems directly over HTTP or HTTPS and issuing read-only NetApp ZAPI commands.
To scan a NetApp cluster, you should make the following preparations:
- Obtain the NetApp Cluster Name or IP address.
- Obtain a user account profile for the NetApp Cluster.
- Use the predefined readonly role or create a new role as described below:
role create -role <role_name> -cmddirname "cluster identity show" -access readonly
role create -role <role_name> -cmddirname "cluster peer show" -access readonly
role create -role <role_name> -cmddirname "network interface show" -access readonly
role create -role <role_name> -cmddirname "snapmirror show" -access readonly
role create -role <role_name> -cmddirname "storage aggregate show" -access readonly
role create -role <role_name> -cmddirname "storage disk show" -access readonly
role create -role <role_name> -cmddirname "system node show" -access readonly
role create -role <role_name> -cmddirname "vserver show" -access readonly
role create -role <role_name> -cmddirname "vserver cifs share show" -access readonly
role create -role <role_name> -cmddirname "vserver iscsi show" -access readonly
role create -role <role_name> -cmddirname "vserver options" -access readonly
role create -role <role_name> -cmddirname "vserver peer show" -access readonly
role create -role <role_name> -cmddirname "volume show" -access readonly
role create -role <role_name> -cmddirname "volume qtree show" -access readonly
role create -role <role_name> -cmddirname "volume snapshot show" -access readonly
role create -role <role_name> -cmddirname "lun show" -access readonly
role create -role <role_name> -cmddirname "lun igroup show" -access readonly
role create -role <role_name> -cmddirname "lun mapped show" -access readonly
role create -role <role_name> -cmddirname "version" -access readonly
role create -role <role_name> -cmddirname "cluster peer show" -access readonly
role create -role <role_name> -cmddirname "network interface show" -access readonly
role create -role <role_name> -cmddirname "snapmirror show" -access readonly
role create -role <role_name> -cmddirname "storage aggregate show" -access readonly
role create -role <role_name> -cmddirname "storage disk show" -access readonly
role create -role <role_name> -cmddirname "system node show" -access readonly
role create -role <role_name> -cmddirname "vserver show" -access readonly
role create -role <role_name> -cmddirname "vserver cifs share show" -access readonly
role create -role <role_name> -cmddirname "vserver iscsi show" -access readonly
role create -role <role_name> -cmddirname "vserver options" -access readonly
role create -role <role_name> -cmddirname "vserver peer show" -access readonly
role create -role <role_name> -cmddirname "volume show" -access readonly
role create -role <role_name> -cmddirname "volume qtree show" -access readonly
role create -role <role_name> -cmddirname "volume snapshot show" -access readonly
role create -role <role_name> -cmddirname "lun show" -access readonly
role create -role <role_name> -cmddirname "lun igroup show" -access readonly
role create -role <role_name> -cmddirname "lun mapped show" -access readonly
role create -role <role_name> -cmddirname "version" -access readonly
- Create a new user:
security login create -username <user_name> -application ontapi -authmethod password -role <role_name>
- Verify that IP connectivity through HTTP (default is port 80) or HTTPS (default is port 443) is available between the AvailabilityGuard collector server and each NetApp Cluster.
To scan a NetApp Filer (7-MODE), you should make the following preparations:
- Obtain the NetApp filer Name or IP address.
- Obtain a NetApp filer user account.
- Use the Admin role or create a new restricted role as described below:
Option A:
useradmin role add <role_name> -a login-http-admin,api-*
Option B (more restricted):
useradmin role add <role_name> -a login-http-admin,api-system-get-info,api-system-get-version,api-license-v2-list-info,api-net-ifconfig-get,api-clock-get-clock,api-options-list-info,api-vfiler-list-info,api-aggr-list-info,api-volume-list-info,api-qtree-list,api-snapshot-list-info,api-lun-list-info,api-igroup-list-info,api-iscsi-node-get-name,api-lun-map-list-info,api-nfs-exportfs-list-rules,api-nfs-exportfs-list-rules-2,api-cifs-share-list-iter-start,api-cifs-share-list-iter-next,api-cifs-share-list-iter-end,api-snapmirror-get-status,api-snapvault-primary-relationship-status-list-iter-start,api-snapvault-primary-relationship-status-list-iter-next,api-snapvault-primary-relationship-status-list-iter-end,api-disk-list-info,api-net-resolve,api-volume-get-root-name,api-storage-adapter-get-adapter-info,api-storage-adapter-get-adapter-list
- Create a new group and user:
useradmin group add <group_name> -r <role_name>useradmin user add <user_name> -g <group_name>
- Verify that IP connectivity through HTTP (default is port 80) or HTTPS (default is port 443) is available between the AvailabilityGuard application server and each NetApp Filer.
Comments
0 comments
Please sign in to leave a comment.