Oracle ZFS Storage Appliance Administration Manual

Oracle ZFS Storage Appliance Administration Manual

Hide thumbs Also See for ZFS Storage Appliance:
Table of Contents

Advertisement

Quick Links

Oracle
ZFS Storage Appliance
®
Administration Guide, Release OS8.6.x
Part No: E76483-01
September 2016

Advertisement

Table of Contents
loading

Summary of Contents for Oracle ZFS Storage Appliance

  • Page 1 Oracle ZFS Storage Appliance ® Administration Guide, Release OS8.6.x Part No: E76483-01 September 2016...
  • Page 3 Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.
  • Page 4 Oracle Corporation et ses affiliés déclinent toute responsabilité ou garantie expresse quant aux contenus, produits ou services émanant de tiers, sauf mention contraire stipulée dans un contrat entre vous et Oracle. En aucun cas, Oracle Corporation et ses affiliés ne sauraient être tenus pour responsables des pertes subies, des coûts occasionnés ou des dommages causés par l’accès à...
  • Page 5: Table Of Contents

    Contents About the Oracle ZFS Storage Appliance ............ 19 Oracle ZFS Storage Appliance Key Features ............ 20 Supported Protocols .................. 20 Appliance Data Services .................  21 Data Availability ...................  21 Browser User Interface (BUI) ................ 22 Network Icons .................... 30 Dashboard Icons .................... 30 Analytics Toolbar Icons ..................  31 Identity Mapping Icons ..................  32 Supported Browsers ..................
  • Page 6 Data Profiles for Storage Pools ..............  111 Understanding the Appliance Status .............. 113 Dashboard Status .................  114 Summary of Memory Use .............. 119 Disk Activity Dashboard ...............  120 Dashboard CLI .................. 122 ▼ Running the Dashboard Continuously .......... 123 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 7 Contents Status Dashboard Settings .............. 124 ▼ Changing the Displayed Activity Statistics ..........  126 ▼ Changing the Activity Thresholds ............ 126 NDMP Status .................. 127 NDMP States .................. 128 Configuring Storage Area Network (SAN) ............ 128 ▼ Configuring FC Port Modes (BUI) ............  129 ▼ Discovering FC Ports (BUI) .............  130 ▼...
  • Page 8 ▼ Shutting Down a Clustered Configuration (BUI) ........ 197 ▼ Shutting Down a Clustered Configuration (CLI) ........ 199 Cluster Terminology ................ 201 Understanding Clustering .............. 201 Cluster Advantages and Disadvantages ............  203 Cluster Interconnect I/O ................  205 Cluster Resource Management ...............  206 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 9 Contents Cluster Takeover and Failback ...............  209 Configuration Changes in a Clustered Environment ........ 211 Clustering Considerations for Storage ............ 212 Clustering Considerations for Networking .......... 214 Private Local IP Interfaces .............. 216 Clustering Considerations for Infiniband .......... 217 Preventing Split-Brain Conditions ............ 219 Estimating and Reducing Takeover Impact .......... 221 Appliance Services ..................
  • Page 10 ▼ Moving a Filesystem or LUN to a Different Project (CLI) ...... 357 ▼ Deleting a Filesystem or LUN (BUI) ............ 358 ▼ Deleting a Filesystem or LUN (CLI) ............ 358 ▼ Setting User or Group Quotas (BUI) ............ 359 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 11 Contents ▼ Setting User or Group Quotas (CLI) ............ 360 About Storage Pools, Projects, and Shares ............ 361 Project and Share Properties ................ 363 Inherited Properties ................ 364 LUN Local Properties ................ 371 Other Properties ..................  371 Static Properties ..................  372 Project Properties .................. 376 Filesystem Properties .................. 382 LUN Properties ...................  390 Space Management for Shares ...............  396 Shares Terminology ..................
  • Page 12 ▼ Rolling Back to a Snapshot (BUI) .............  457 ▼ Rolling Back to a Snapshot (CLI) .............. 458 ▼ Destroying a Snapshot (BUI) .............. 459 ▼ Destroying a Snapshot (CLI) .............. 460 ▼ Cloning a Snapshot (BUI) ................  461 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 13 Contents ▼ Cloning a Snapshot (CLI) ................  463 ▼ Cloning a Clone .................. 464 ▼ Viewing Clones of a Snapshot (BUI) ............ 465 ▼ Viewing Clones of a Snapshot (CLI) ............ 465 ▼ Viewing a Clone Origin (BUI) .............. 466 ▼ Viewing a Clone Origin (CLI) .............. 466 Remote Replication ..................
  • Page 14 Replication Targets ................ 529 Replication Actions and Packages ............ 530 Replication Storage Pools .............. 531 Project vs. Share Replication .............. 532 Replication Authorizations .............. 533 Replication Configuration for Clustered Appliances ........ 534 Example: Replication Configuration for Clustered Appliances ......  535 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 15 Contents Replication Snapshots and Data Consistency .......... 542 Replication Snapshot Management ............ 543 iSCSI Configurations and Replication .............  544 Replication Failures ................ 545 Replication Action Properties .............. 547 Compressed Replication ................  549 Replication Packages ................ 550 Cloning a Replication Package or Share ........... 551 Exporting Replicated Filesystems ............ 552 Severing Replication ................ 553 How Reverse Replication Works ............
  • Page 16 ▼ Executing Workflows using the CLI ............ 609 ▼ Auditing Workflows using the CLI ............ 609 Integration .......................  611 Configuring the Oracle ZFS Storage Appliance for Oracle Database Clients ....  612 Oracle Exadata Database Machine Backup ............ 612 Configuring the Appliance for Exadata ............  613 Configuring Exadata for Appliance ............ 616 Oracle SuperCluster Backup ................
  • Page 17 Contents Analytics Breakdown by Database Name .......... 644 OISP-Capable Protocols and Clients ............ 644 Appliance Network File System Plug-in for Oracle Solaris Cluster ...... 645 Appliance Plug-in for Oracle Solaris Cluster Geographic Edition ...... 645 Appliance Plug-in for Oracle Enterprise Manager System Monitoring .... 645 Configuring for Oracle Enterprise Manager Monitoring ...... 646 Unconfiguring Oracle Enterprise Manager Monitoring ........
  • Page 18 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 19: About The Oracle Zfs Storage Appliance

    For information about configuring and working with the Oracle ZFS Storage Appliance, see the following sections: Oracle ZFS Storage Appliance Key Features ■...
  • Page 20: Oracle Zfs Storage Appliance Key Features

    Oracle ZFS Storage Appliance Key Features Oracle ZFS Storage Appliance Key Features The Oracle ZFS Storage Appliance includes technologies to deliver the best storage price/ performance and unprecedented observability of your workloads in production, including: Analytics, a system for dynamically observing the behavior of your system in real-time and ■...
  • Page 21: Appliance Data Services

    After the evaluation period, these features must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 22: Browser User Interface (Bui)

    ■ Browser User Interface (BUI) The Oracle ZFS Storage Appliance Browser User Interface (BUI) is the graphical tool for administration of the appliance. The BUI provides an intuitive environment for administration tasks, visualizing concepts, and analyzing performance data. The BUI provides an uncluttered environment for visualizing system behavior and identifying performance issues with the appliance.
  • Page 23 215. The login screen appears. The online help linked in the top right of the BUI is context-sensitive. For every top-level and second-level screen in the BUI, the associated help page appears when you click the Help button. About the Oracle ZFS Storage Appliance...
  • Page 24 The masthead contains several interface elements for navigation and notification, as well as primary functionality. At left, from top to bottom, are the Sun/Oracle logo, a hardware model badge, and hardware power off/restart button. Across the right, again from top to bottom: login identification, logout, help, main navigation, and subnavigation.
  • Page 25 ■ Button to Revert configuration changes applied on the current screen ■ To quickly navigate between Service and Project views, open and close the side panel by clicking the title or the reveal arrow. About the Oracle ZFS Storage Appliance...
  • Page 26 Sort by list headings Click on the bold sub-headings to re-sort the list Move or drag an item Click the move icon Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 27 Rename an item Click the rename icon View details about your system Oracle logo or click the model badge to go to the oracle. com web page for your model Automatically open side panel Drag an item to the side panel When setting permissions, the RWX boxes are clickable targets.
  • Page 28 It is useful to hover your mouse over interface icons to view the tooltip. The tables below provide a key to the conventions of the user interface. The status lights are basic indicators of system health and service state: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 29 (down) alert sort list column (up) on/off toggle first page restart previous page locate next page disable/offline last page lock search wait spinner menu reverse direction panel About the Oracle ZFS Storage Appliance...
  • Page 30: Network Icons

    VLAN Dashboard Icons The following icons indicate the current state of monitored statistics with respect to user- configurable thresholds set from within Settings. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 31: Analytics Toolbar Icons

    About the Oracle ZFS Storage Appliance...
  • Page 32: Identity Mapping Icons

    “Configuring Storage” on page 88 ■ “Configuring Alerts” on page 186 ■ “Appliance Services” on page 225 ■ For more information about Analytics, refer to the documentation on the Oracle Technology Network (http://www.oracle.com/technetwork/indexes/documentation/index.html) Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 33: Supported Browsers

    The CLI is designed to mirror the capabilities of the BUI, while also providing a powerful scripting environment for performing repetitive tasks. The command line is an efficient and powerful tool for repetitive administrative tasks. The appliance presents a CLI available through About the Oracle ZFS Storage Appliance...
  • Page 34 Last login: Mon Oct 13 15:43:05 2009 from kiowa.sf.fishpo dory:> Related Topics “Browser User Interface (BUI)” on page 22 ■ “CLI Contexts” on page 35 ■ “CLI Properties” on page 40 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 35: Cli Contexts

    Navigate to a descendant context directly from an ancestor by specifying the intermediate contexts separated with spaces. For example, to navigate directly to configuration preferences from the root context, simply type it: dory:> configuration preferences dory:configuration preferences> About the Oracle ZFS Storage Appliance...
  • Page 36 ID of the last-visited replication action. Using last, you can return to the last-visited node: dory:configuration net interfaces> "igb4" dory:configuration net interfaces igb4> done dory:configuration net interfaces> last net:configuration net interfaces igb4> Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 37 = get('id'); printf("Sending update for replication action id %s ...", id); run('sendupdate'); while (get('state') != 'idle') { printf("."); run('sleep 1'); printf("done\n"); To return to the previous context, use the done command: dory:configuration> done dory:> About the Oracle ZFS Storage Appliance...
  • Page 38 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 39 For example, the creation of a new threshold alert requires the specification of a statistic name; failure to set this name results in an error: dory:configuration alerts threshold (uncommitted)> commit error: missing value for property "statname" About the Oracle ZFS Storage Appliance...
  • Page 40: Cli Properties

    The properties of a given context can be retrieved with the get command. Following is an example of using the get command to retrieve a user's preferences: dory:configuration preferences> get locale = C login_screen = status/dashboard session_timeout = 15 session_annotation = advanced_analytics = false Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 41 If you attempt to leave a context that contains uncommitted properties, you will be warned that leaving will abandon the set property values, and will be prompted to confirm that you with to leave. For example: About the Oracle ZFS Storage Appliance...
  • Page 42 For example, if the user named bmc is a network user, the fullname property will be immutable: dory:> configuration users select bmc set fullname="Rembrandt Q. Einstein" error: cannot set immutable property "fullname" Related Topics Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 43: Working With Cli Scripting

    The simplest scripting mechanism is to batch appliance shell commands. For example, to automatically take a snapshot called "newsnap" in the project "myproj" and the filesystem "myfs", put the following commands in a file: shares select myproj About the Oracle ZFS Storage Appliance...
  • Page 44: Understanding The Cli Scripting Commands

    Perl-like regular expressions and string manipulation (split(), join(), etc.) ■ Exceptions ■ Sophisticated functional language features like closures ■ Accessing the CLI Script Environment In the CLI, enter the script environment using the script command: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 45: Understanding The Built-In Cli Functions

    Takes two string arguments, setting the specified property to the specified value. Returns an array of the valid property values for any choicies property for which the set of values is known and enumerable. About the Oracle ZFS Storage Appliance...
  • Page 46: Using The Run Function

    Assuming the above is saved as a "uptime.aksh", you could run it this way: % ssh root@dory < uptime.aksh Pseudo-terminal will not be allocated because stdin is not a terminal. Password: up 2 days, 10 hours, 47 minutes, 48 seconds Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 47: Using The List Function

    "space.aksh": % ssh root@koi < space.aksh Password: admin/accounts 18432 266617007104 admin/exports 18432 266617007104 admin/primary 18432 266617007104 admin/traffic 18432 266617007104 admin/workflow 18432 266617007104 aleventhal/hw_eng 18432 266617007104 bcantrill/analytx 1073964032 266617007104 bgregg/dashbd 18432 266617007104 bgregg/filesys01 26112 107374156288 About the Oracle ZFS Storage Appliance...
  • Page 48 % ssh root@koi < prettyspace.aksh Password: SHARE USED AVAILABLE admin/accounts 248G admin/exports 248G admin/primary 248G admin/traffic 248G admin/workflow 248G aleventhal/hw_eng 248G bcantrill/analytx 1.00G 248G bgregg/dashbd 248G bgregg/filesys01 25.5K 100G bpijewski/access_ctrl 248G Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 49 ("." to run)> dump(list(2)); ("." to run)> . name: 'restuser', properties: { kiosk_screen: 'status/dashboard', kiosk_mode: false, roles: ['basic'], require_annotation: false, initial_password: 'DummyPassword', fullname: 'REST User', logname: 'restuser' children: [{ name: 'preferences', About the Oracle ZFS Storage Appliance...
  • Page 50: Using The Children Function

    = children(); for (var i = 0; i < svcs.length; ++i) { run(svcs[i]); try { printf("%-10s %s\n", svcs[i], get('<status>')); } catch (err) { } run("done"); Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 51: Using The Choices Function

    = '%-40s %-15s %-15s\n'; printf(fmt, 'SHARE', 'USED', 'AVAILABLE'); run('cd /'); run('shares'); pools = choices('pool'); for (p = 0; p < pools.length; p++) { About the Oracle ZFS Storage Appliance...
  • Page 52: Using The Functions For Generating Output

    If the object does not have a toString method, it will be printed opaquely. Like C's printf(3C), prints the specified arguments printf according to the specified formatting string. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 53: Understanding Cli Scripting Errors

    $1'); } catch (err) { if (err.code == EAKSH_ENTITY_BADSELECT) { printf('error: "$1" is not a share in the ' + 'default project\n'); exit(1); throw (err); printf('"default/$1": compression is %s\n', get('compression')); exit(0); About the Oracle ZFS Storage Appliance...
  • Page 54 If this script is named "share.ksh" and run with an invalid share name, a rich error message will be generated: % ksh ./share.ksh bogus error: "bogus" is not a share in the default project Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 55: Configuring The Appliance

    Maintenance > System screen, or by entering the maintenance system setup context in the CLI. Detailed initial configuration information is located in “Configuring the Appliance for the First Time” in Oracle ZFS Storage Appliance Installation Guide. Network Configuration The Networking Configuration features lets you create a variety of advanced networking setups using your physical network ports, including link-aggregations, virtual NICs (VNICs), virtual LANs (VLANs), and multipathing groups.
  • Page 56: Network Configuration (Bui)

    You can also perform particularly complex network reconfiguration tasks from the CLI over the serial console if necessary. The following icons are used in the Configuration > Network section: TABLE 11 Network Configuration Icons icon description Add new datalink/interface/route Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 57 Network Configuration icon description Edit datalink/interface/route settings Editing disabled Destroy datalink/interface/route Destruction disabled Drag-and-drop icon connected network port connected network port with I/O activity disconnected network port (link down, cable problem?) active InfiniBand port active InfiniBand port with I/O activity inactive InfiniBand port (down, init, or arm state) InfiniBand partition device is up InfiniBand partition device is down (subnet manager...
  • Page 58 Warning: Multiple interfaces found; using 10.80.198.102 @ igb3 traceroute to 10.80.198.101 (10.80.198.101), 30 hops max, 40 byte packets 1 10.80.198.1 (10.80.198.1) 1.031 ms 0.905 ms 0.769 ms 2 10.80.198.101 (10.80.198.101) 0.158 ms 0.111 ms 0.109 ms Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 59 Configuring Management Interfaces (BUI) Configuring Management Interfaces (BUI) Use the following procedure to configure management interfaces. Go to Configuration > Network. Click the add icon next to Datalinks. Set the following minimum datalink properties and click APPLY. VNIC - Select this check box. ■...
  • Page 60 In the BUI of the second controller, navigate to Configuration > Cluster. From the BUI of the first controller, choose the management interface for the first controller from the Resource list. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 61 The interface displays a locked icon next to its name in the Resource list. Related Topics To upgrade the software, see “Upgrading the Software” in Oracle ZFS Storage Appliance ■ Customer Service Manual. Creating a Single Port Interface (BUI) Click the Datalinks icon.
  • Page 62 If a data interface has a type set to private, select the resource and set the type to singleton. hostname:configuration cluster resources> select net/vnic3 hostname:configuration cluster resources net/vnic3> set type=singleton type = singleton Enter commit. hostname:configuration cluster resources> commit Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 63 Creating a Single Port Interface (BUI) Creating a Single Port Interface (BUI) Mouse over a device and click the drag-and-drop icon ( Drag it to the Datalink list and release. Optionally set name and jumbo MTU. Click "APPLY". Now Drag the datalink over to the Interfaces list. Set desired properties, and click "APPLY".
  • Page 64 IPMP interface. Choose the interfaces created in the first step from the Interfaces list. Set each chosen interface to be either "Active" or "Standby", as desired. Click "APPLY". Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 65 Extending an LACP Aggregation (BUI) Extending an LACP Aggregation (BUI) Mouse-over a device in the Devices list. Click the icon, and drag the device onto an aggregation datalink, and release. Click "APPLY" at the top of the page to commit this configuration. Extending an IPMP group (BUI) Mouse-over an interface in the Interfaces list.
  • Page 66 2), and click "APPLY". The new VNIC datalink appears in the Datalinks list. Click the Interface icon. Set desired properties, choose the VNIC datalink previously created, and click "APPLY". The interface appears in the Interfaces list. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 67 Creating VNICs with the Same VLAN ID for Clustered Controllers (BUI) The running appliance network configuration has not yet changed. When you are finished configuring interfaces, click "APPLY" at the top to commit the configuration. Click the Cluster tab. The two newly created interfaces appear in the Resource section with default owners.
  • Page 68: Network Configuration (Cli)

    0:14:4f:9a:b9:0 igb1 true 1000 Mbit/s 0:14:4f:9a:b9:1 igb2 true 1000 Mbit/s 0:14:4f:9a:b8:fe igb3 true 1000 Mbit/s 0:14:4f:9a:b8:ff caji:configuration net> datalinks show Datalinks: DATALINK CLASS LINKS LABEL igb0 device igb0 datalink1 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 69 Deleting a Static Route (BUI) caji:configuration net> interfaces show Interfaces: INTERFACE STATE CLASS LINKS ADDRS LABEL igb0 up igb0 192.168.2.80/22 caji caji:configuration net> routing show Properties: multihoming = loose Routes: ROUTE DESTINATION GATEWAY INTERFACE TYPE route-000 0.0.0.0/0 192.168.1.1 igb0 dhcp route-001 192.168.0.0/22 192.168.2.142 igb0...
  • Page 70 .. caji:configuration net> interfaces caji:configuration net interfaces> ip caji:configuration net interfaces ip (uncommitted)> set label="caji2" label = caji2 (uncommitted) caji:configuration net interfaces ip (uncommitted)> set links=igb1 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 71 Configuring Management Interfaces (CLI) links = igb1 (uncommitted) caji:configuration net interfaces ip (uncommitted)> set v4addrs=10.0.1.1/8 v4addrs = 10.0.1.1/8 (uncommitted) caji:configuration net interfaces ip (uncommitted)> commit caji:configuration net interfaces> show Interfaces: INTERFACE STATE CLASS LINKS ADDRS LABEL igb0 up igb0 192.168.2.80/22 caji igb1 up igb1...
  • Page 72 (uncommitted)> set v4addrs=192.168.1.101/24 v4addrs = 192.168.1.101/24 (uncommitted) hostname:configuration net interfaces ip (uncommited)> set label=management-controller-1 label = management-controller-1 (uncommitted) hostname:configuration net interfaces ip (uncommitted)> set links=vnic1 links = vnic1 (uncommitted) Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 73 Configuring Management Interfaces (CLI) hostname:configuration net interfaces ip (uncommited)> commit If clustered controllers, create an IP interface and assign it to the VNIC for the second controller. After entering commit, enter done. hostname:configuration net interfaces> ip hostname:configuration net interfaces ip (uncommitted)> set v4addrs=192.168.1.102/24 v4addrs = 192.168.1.102/24 (uncommitted) hostname:configuration net interfaces ip (uncommited)>...
  • Page 74 IP addresses, one for use by each node in the source cluster. Replicating to the same target IP address from both nodes of a source cluster is not supported. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 75 Locking Cluster Management Interfaces (CLI) Navigate to configuration services routing on the source appliance. Use a static /32 (host-specific) route to the target system IP address via the dedicated network interface. In the following example, mask=32 means this is a host-specific route. host_source:configuration services routing>...
  • Page 76 “Upgrading the Software” in Oracle ZFS Storage Appliance ■ Customer Service Manual. Adding a Static Route (CLI) Go to configuration net routing. Enter create. Type show to list required properties, and set each. Enter commit. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 77: Working With Network Configuration

    Deleting a Static Route (CLI) Deleting a Static Route (CLI) Go to configuration net routing. Type show to list routes, and route names (e.g., route-002). Enter destroy route name. Changing the Multihoming Property to Strict (CLI) Go to configuration net routing. Enter set multihoming=strict.
  • Page 78 (IPMP) group comprising a pool of datalinks, which allows automatic migration of IP addresses from failed to working datalinks. An example of a single IP address on a single port (common configuration) is: Devices - igb0 ■ Datalink - datalink1 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 79: Configuring Management Interfaces

    Changing the Multihoming Property to Strict (CLI) Interface - deimos (192.168.2.80/22) ■ The following configuration is for a 3-way link aggregation: Devices - igb1, igb2, igb3 ■ Datalink - aggr1 (LACP aggregation) ■ Interface - phobos (192.168.2.81/22) ■ Configuring Management Interfaces If you did not set a management interface during initial configuration, use the following procedures to configure a network interface card (NIC) port as a management interface.
  • Page 80 IEEE standard and the extensions are transparent to the end-nodes, its use is supported with the appliance. If an issue is encountered, Oracle support may require it to be reproduced on a single-switch configuration. The following datalink settings are available:...
  • Page 81 Changing the Multihoming Property to Strict (CLI) Property Description is set and the new network configuration is committed to the system, you can return to the network screen and view the datalink status to see the exact MTU value in bytes that was selected.
  • Page 82: Configuring Network Interfaces

    IP addresses, and could ease traffic congestion through core switches and routers. IP MultiPathing Group Configure IP multipathing, where a pool of datalinks can be used for redundancy Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 83: Configuring Network Ip Multipathing (Ipmp)

    Changing the Multihoming Property to Strict (CLI) Configuring Network IP MultiPathing (IPMP) IP MultiPathing groups are used to provide IP addresses that will remain available in the event of an IP interface failure (such as a physical wire disconnection or a failure of the connection between a network device and its switch) or in the event of a path failure between the system and its network gateways.
  • Page 84: Configuring Network Performance And Availability

    VNICs are not in use. If more than eight VNICs/VLANs are configured over a given datalink, performance may degrade significantly. Also, if a datalink uses a VLAN ID, all datalink performance for that device may be impacted by an additional five percent. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 85: Configuring Network Routing

    Changing the Multihoming Property to Strict (CLI) Configuring Network Routing The system provides a single IP routing table, consisting of a collection of routing table entries. When an IP packet needs to be sent to a given destination, the system selects the routing entry whose destination most closely matches the packet's destination address (subject to the system's multihoming policy;...
  • Page 86 Controls the system policy for accepting and transmitting IP packets when multiple IP interfaces are simultaneously enabled. Allowed values are "loose" (default), "adaptive", and "strict". See the discussion below. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 87 Changing the Multihoming Property to Strict (CLI) If a system is configured with more than one IP interface, then there may be multiple equivalent routes to a given destination, forcing the system to choose which IP interface to send a packet on.
  • Page 88: Configuring Storage

    “Importing an Existing Storage Pool (BUI)” on page For recommendations on how many drives to select per pool, see “Number of Devices per Before You Begin ■ Pool” on page 110. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 89 Creating a Storage Pool (BUI) To understand the different data profiles, see “Data Profiles for Storage ■ Pools” on page 111. Do not perform a pool configuration operation while a disk firmware upgrade is occurring. ■ To check if an upgrade is in progress, navigate to Maintenance > System. Go to Configuration >...
  • Page 90: Creating A Storage Pool (Cli)

    “Importing an Existing Storage Pool (CLI)” on page For recommendations on how many drives to select per pool, see “Number of Devices per Before You Begin ■ Pool” on page 110. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 91 Creating a Storage Pool (CLI) To understand the different data profiles, see “Data Profiles for Storage ■ Pools” on page 111. Do not perform a pool configuration operation while a disk firmware upgrade is occurring. ■ To check if an upgrade is in progress, navigate to maintenance system updates. Go to configuration storage.
  • Page 92: Importing An Existing Storage Pool (Bui)

    Unlike storage configuration, the storage pool name is not initially shown, but it is shown after selecting the storage pool. Click IMPORT. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 93: Importing An Existing Storage Pool (Cli)

    Importing an Existing Storage Pool (CLI) Select the storage pool you want to import. By default, the previous storage pool names are displayed. To rename the storage pool, click the pool name and change it. Click COMMIT. Related Topics “Unconfiguring a Storage Pool (BUI)” on page 103 ■...
  • Page 94: Adding A Disk Shelf To An Existing Storage Pool (Bui)

    “Renaming a Storage Pool (CLI)” on page 105 ■ Adding a Disk Shelf to an Existing Storage Pool (BUI) Use the following task to add a disk shelf to an existing storage pool. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 95 Once a disk has been added to a pool, it cannot be removed without destroying the Caution - pool entirely and losing all data. Install the new disk shelf using “Adding a New Disk Shelf” in Oracle ZFS Storage Appliance Customer Service Manual. Go to Configuration > Storage.
  • Page 96: Adding A Disk Shelf To An Existing Storage Pool (Cli)

    Install the new disk shelf using “Adding a New Disk Shelf” in Oracle ZFS Storage Appliance Customer Service Manual. Go to configuration storage. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 97 Adding a Disk Shelf to an Existing Storage Pool (CLI) If you have multiple pools, a default pool is selected and displayed. If this is not the pool to which you want to add the device, enter set pool= and specify another online pool.
  • Page 98: Adding A Cache Or Log Device To An Existing Storage Pool (Bui)

    Install the new read cache or log device into the first available and appropriate slot. To determine the appropriate slot, as described in “Disk Shelf Configurations” in Oracle ZFS Storage Appliance Customer Service Manual. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 99: Adding A Cache Or Log Device To An Existing Storage Pool (Cli)

    To check if an upgrade is in progress, navigate to maintenance system updates. Install the new read cache or log device into the first available and appropriate slot. To determine the appropriate slot, as described in “Disk Shelf Configurations” in Oracle ZFS Storage Appliance Customer Service Manual. Configuring the Appliance...
  • Page 100 This example allocates one cache device from the second disk shelf. hostname:configuration storage (pool1) verify> set 2-cache=1 2-cache = 1 Enter done. hostname:configuration storage (pool1) verify> done Enter show to display the profile. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 101: Removing A Cache Or Log Device From An Existing Storage Pool (Bui)

    Removing a Cache or Log Device from an Existing Storage Pool (BUI) hostname:configuration storage (pool1) config> show PROFILE CAPCTY NSPF DESCRIPTION log_profile = log_stripe Striped log If you allocated log devices to the pool, enter set log_profile= and set the log profile to either log_mirror or log_stripe.
  • Page 102: Removing A Cache Or Log Device From An Existing Storage Pool (Cli)

    Enter show to see the device information for the pool. hostname:configuration storage (pool1) verify> show ID STATUS ALLOCATION DATA CACHE custom 1.86T custom 0/2 34G 15000 custom 0/2 34G 15000 Enter remove. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 103: Unconfiguring A Storage Pool (Bui)

    Unconfiguring a Storage Pool (BUI) hostname:configuration storage (pool1)> remove Specify the controller or disk shelf, and the number of log or cache devices to remove. ID "0" is the controller, and the remaining IDs are the disk shelves. In the following example, 1-log=2 removes two log devices from the first disk shelf: hostname:configuration storage (pool1) remove>...
  • Page 104: Unconfiguring A Storage Pool (Cli)

    Note - hostname:configuration storage (pool0)> set pool=pool1 pool = pool1 Enter unconfig. hostname:configuration storage (pool1)> unconfig Enter done. Related Topics “Importing an Existing Storage Pool (CLI)” on page 93 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 105: Renaming A Storage Pool (Bui)

    Renaming a Storage Pool (BUI) “Renaming a Storage Pool (CLI)” on page 105 ■ Renaming a Storage Pool (BUI) To rename a storage pool, you must unconfigure it and then immediately import it with a new name. While storage is unconfigured, data will be inaccessible and there is a potential for data loss.
  • Page 106 = pool1 To rename the storage pool, enter set name= and a new name. hostname:configuration storage (pool1)> set name=NewPool pool = NewPool Enter done. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 107: Scrubbing A Storage Pool (Bui)

    Scrubbing a Storage Pool (BUI) Related Topics “Unconfiguring a Storage Pool (CLI)” on page 104 ■ “Importing an Existing Storage Pool (CLI)” on page 93 ■ Scrubbing a Storage Pool (BUI) Scrubbing a storage pool verifies the content by checking for errors. If any unrecoverable errors are found, either through a scrub or through normal operation, the BUI displays the affected files.
  • Page 108: Viewing Pool And Device Status (Bui)

    A pool with one or more failed devices, but the data is still available due to a redundant configuration. Faulted One or more component devices are offline and there are insufficient replicas to continue functioning. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 109: Storage Pool Concepts

    Pools can be created by configuring a new pool, or importing an existing pool. Importing an existing pool is only used to import pools previously configured on an Oracle ZFS Storage Appliance, and is useful in case of accidental reconfiguration, such as when moving pools between controllers, or due to catastrophic controller failure.
  • Page 110 The sizes used will depend on the storage profile, layout, and combination of devices. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 111: Data Profiles For Storage Pools

    Viewing Pool and Device Status (BUI) Storage Pool Capacity When allocating raw storage to pools, keep in mind that filling pools completely will result in significantly reduced performance, especially when writing to shares or LUNs. These effects become more noticeable as the pool reaches full capacity. Data Profiles for Storage Pools After storage devices are physically verified and resources are allocated for a storage pool, the next step is to choose a storage profile that reflects your reliability, availability and...
  • Page 112 This a highly-unlikely event, however mirroring log devices can make this effectively impossible, requiring two simultaneous device failures and node failure within a very small time window. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 113: Understanding The Appliance Status

    The Status section provides a summary of appliance status and configuration options. Use the following sections for conceptual and procedural information about appliance status views and related service configuration: “About the Oracle ZFS Storage Appliance” on page 19 ■ “Dashboard Status” on page 114 ■...
  • Page 114: Dashboard Status

    The name of the pool appears at the top right of the Usage area. If multiple pools are configured, use the pull-down list to select the desired pool to display. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 115 Understanding the Appliance Status Status Dashboard Usage FIGURE 1 The total pool capacity is displayed at the top of this area. The Storage pie-chart details the used, available, and free space. To go to the Shares screen for the pool, click the Storage pie- chart.
  • Page 116 Logs screen for the service. Dashboard Hardware This area of the Dashboard shows an overview of hardware on the appliance. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 117 Understanding the Appliance Status Hardware Dashboard FIGURE 3 If there is a known fault, the amber fault icon appears. To go to the Hardware screen for a detailed look at hardware state, click the name of a hardware component. Dashboard Activity The activity area of the Dashboard shows graphs of eight performance statistics by default.
  • Page 118 Different environments have different acceptable levels for performance (latency), and so ■ there is no one-size-fits-all threshold. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 119: Summary Of Memory Use

    Understanding the Appliance Status The statistics on the Dashboard are based on operations/sec and bytes/sec, so you should use ■ Analytics worksheets for an accurate understanding of system performance. Recent Alerts FIGURE 5 Recent Alerts This section shows the last four appliance alerts. Click the box to go to the Logs screen to examine all recent alerts in detail.
  • Page 120: Disk Activity Dashboard

    Disk Activity Dashboard To go to the Analytics worksheet for an activity, click one of the four graphs (day, hour, minute, second) for the statistic you want to evaluate. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 121 Understanding the Appliance Status To view the average for each graph, mouse-over a graph and the average appears in the tooltip. The weather icon in the upper-left provides a report of activity according to thresholds you can customize for each statistic on the Status Settings screen. TABLE 24 Summary of Statistic Graphs Summary of Statistic Graphs...
  • Page 122: Dashboard Cli

    1 %util Sunny Disk 32 ops/sec Sunny iSCSI 0 ops/sec Sunny NDMP 0 bytes/sec Sunny NFSv3 0 ops/sec Sunny NFSv4 0 ops/sec Sunny Network 13K bytes/sec Sunny 0 ops/sec Sunny Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 123: Running The Dashboard Continuously

    Running the Dashboard Continuously Recent Alerts: 2013-6-15 07:46: A cluster interconnect link has been restored. The previous descriptions in this section apply, with the following differences: The activity plots are not rendered in text (although we have thought about using aalib). ■...
  • Page 124: Status Dashboard Settings

    Average number of iSCSI operations. operations/sec Average number of Fibre Channel operations. NDMP bytes/sec Average NDMP network bytes. NFSv2 operations/sec Average number of NFSv2 operations. NFSv3 operations/sec Average number of NFSv3 operations. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 125 Running the Dashboard Continuously Name Units Description NFSv4 operations/sec Average number of NFSv4 operations. Network bytes/sec Average bytes/sec across all physical network interfaces. operations/sec Average number of SMB operations. SMB2 operations/sec Average number of SMB2 operations. bytes/sec Average number of FTP bytes. SFTP bytes/sec Average number of SFTP bytes.
  • Page 126: Changing The Displayed Activity Statistics

    Customize the values in the list, in the order they appear. Some statistics will provide a Units drop-down, so that Kilo/Mega/Giga can be selected. To save your configuration, click the Apply button. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 127: Ndmp Status

    Changing the Activity Thresholds NDMP Status When the NDMP service has been configured and is active, the Status=>NDMP page shows the NDMP devices and recent client activity. A green indicator shows that the device is online and a gray indicator shows that the device is offline. To resort the NDMP Device list, click on the Devices column headings.
  • Page 128: Ndmp States

    The SAN configuration page lets you connect your appliance to your Storage Area Network (SAN). A SAN is made up of three basic components: A client that will access the storage on the network ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 129: Configuring Fc Port Modes (Bui)

    Configuring FC Port Modes (BUI) A storage appliance that will provide the storage on the network ■ A network that will link the client to the storage ■ To configure SAN, use the following sections: Configuring FC Port Modes (BUI) ■...
  • Page 130: Discovering Fc Ports (Bui)

    Discovered Ports dialog where you can troubleshoot link errors. In the Discovered Ports dialog, click a WWN in the list to view associated link errors. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 131 Discovering FC Ports (BUI) Discovered FC Ports FIGURE 9 In the Discovered Ports dialog, click a WWN in the list to view associated link errors. Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■ Configuring the Appliance...
  • Page 132: Creating Fc Initiator Groups (Bui)

    Click a WWN in the list to add a meaningful alias in the Alias field. On the Initiators page, drag initiators to the FC Initiator Groups list to create new groups or add to existing groups. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 133: Associating A Lun With An Fc Initiator Group (Bui)

    Associating a LUN with an FC Initiator Group (BUI) FC Initiator Groups List FIGURE 10 Click the Apply button to commit the new Initiator Group. Now you can create a LUN that has exclusive access to the client initiator group. Related Topics Understanding SAN ■...
  • Page 134 Set the name and size and click Apply to add the LUN to the storage pool. Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■ SAN iSCSI Configuration ■ SAN iSER Target Configuration ■ SAN SRP Configuration ■ SAN Terminology ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 135: Changing Fc Port Modes (Cli)

    Changing FC Port Modes (CLI) Changing FC Port Modes (CLI) To change FC port modes, use the following CLI commands: dory:configuration san fc targets> set targets="wwn.2101001B32A11639" targets = wwn.2101001B32A11639 (uncommitted) dory:configuration san fc targets> commit Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■...
  • Page 136: Creating Fc Initiator Groups (Cli)

    (uncommitted)> commit dory:configuration san fc initiators> list GROUP NAME group-001 lefteye +-> INITIATORS wwn.2101001B32A1AC39 wwn.2100001B3281AC39 Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■ SAN iSCSI Configuration ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 137: Associating A Lun With An Fc Initiator Group (Cli)

    Associating a LUN with an FC Initiator Group (CLI) SAN iSER Target Configuration ■ SAN SRP Configuration ■ SAN Terminology ■ Associating a LUN with an FC Initiator Group (CLI) The following example demonstrates creating a LUN called lefty and associating it with the fera initiator group.
  • Page 138 %s for %s ... ', groups[group][initiator], initiator); try { run('select alias=' + initiator); printf('(already exists)\n'); run('cd ..'); } catch (err) { if (err.code != EAKSH_ENTITY_BADSELECT) throw err; run('create'); set('alias', initiator); set('initiator', groups[group][initiator]); run('commit'); Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 139: Creating An Analytics Worksheet (Bui)

    Creating an Analytics Worksheet (BUI) printf('done\n'); run('select alias=' + initiator); initiators.push(get('initiator')); run('cd ..'); printf('Creating group for %s ... ', group); run('groups'); try { run('select name=' + group); printf('(already exists)\n'); run('cd ..'); } catch (err) { if (err.code != EAKSH_ENTITY_BADSELECT) throw err; run('create');...
  • Page 140: Configuring San Iser Targets

    To configure ibp(x) interfaces, select the ibp(x) interface (or ipmp) you want, and drag it to the Datalinks list to create the datalink on the Configuration > Network screen. Drag the Datalink to the Interfaces list to create a new interface. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 141 Configuring SAN iSER Targets To create an iSER target, on the Configuration > SAN page, click the iSCSI Targets link. To add a new iSER target with an alias, click the add icon. To create a target group, drag the target you just created to the iSCSI Target Group list.
  • Page 142 Target Group and Initiator Groups menu. Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■ SAN iSCSI Configuration ■ SAN iSER Target Configuration ■ SAN SRP Configuration ■ SAN Terminology ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 143: Adding An Iscsi Target With An Auto-Generated Iqn (Cli)

    Adding an iSCSI Target with an Auto-generated IQN (CLI) Adding an iSCSI Target with an Auto-generated IQN (CLI) To add an iSCSI target with an auto-generated IQN, use the following CLI commands: ahi:configuration san iscsi targets> create ahi:configuration san iscsi targets target (uncommitted)> set alias="Target 0" ahi:configuration san iscsi targets target (uncommitted)>...
  • Page 144: Adding An Iscsi Initiator With Chap Authentication (Cli)

    (uncommitted)> set chapsecret=123456789012abc ahi:configuration san iscsi initiators initiator (uncommitted)> commit ahi:configuration san iscsi initiators> list NAME ALIAS initiator-000 Init 0 +-> INITIATOR iqn.2001-02.com.acme:initiator12345 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 145: Adding An Iscsi Target Group (Cli)

    Adding an iSCSI Target Group (CLI) Related Topics Understanding SAN ■ SAN Fibre Channel Configuration ■ SAN iSCSI Configuration ■ SAN iSER Target Configuration ■ SAN SRP Configuration ■ SAN Terminology ■ Adding an iSCSI Target Group (CLI) To add an iSCSI target group, use the following CLI commands: ahi:configuration san iscsi targets groups>...
  • Page 146: Configuring Srp Target (Bui)

    Click the Target link and then click SRP targets. The SRP targets page appears. To create the target group, use the move icon to drag a target to the Target Groups list. Click Apply. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 147: Configuring Srp Targets (Cli)

    Configuring SRP Targets (CLI) (Optional) To create an initiator and initiator group on the Initiator screen, click icon, collect GUID from initiator, assign it a name, and drag it to initiator group. To create a LUN and associate it with the SRP target and initiators you created in the previous steps, go to the Shares screen.
  • Page 148: Understanding San

    LUN is not explicitly associated with a target group, it is in the default target group and will be accessible via all targets, regardless of protocol. Similarly, a LUN can only be seen by the Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 149 Configuring SRP Targets (CLI) initiators in the group or groups to which it belongs. If a LUN is not explicitly associated with an initiator group, it is in the default initiator group and can be accessed by all initiators. While using the default initiator group can be useful for evaluation purposes, its use is discouraged since it may result in exposure of the LUN to unwanted or conflicting initiators.
  • Page 150: San Fibre Channel Configuration

    Each FC port is assigned a World Wide Name (WWN), and, as with other block protocols, FC targets may be grouped into SAN target and initiator groups, allowing port bandwidth to be Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 151 LUNs or groups of LUNs. Once an FC port is configured as a target, the remotely discovered ports can be examined and verified. Refer to the Implementing Fibre Channel SAN Boot with Oracle's Sun ZFS Storage Appliance white paper at http://www.oracle.com/technetwork/articles/servers-storage-admin/...
  • Page 152 Overloaded ports on the front end - too many hosts associated with one FC port and/or too ■ many LUNs accessed through one FC port Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 153 Configuring SRP Targets (CLI) Degraded appliance operating modes, such as a cluster takeover in what is designed to be an ■ active-active cluster configuration While the possibility of queue overruns is remote, it can be eliminated entirely if one is willing to limit queue depth on a per-client basis.
  • Page 154: San Iscsi Configuration

    This name shows that this is an iSCSI device built by a company registered in March of 1986. The naming authority is just the DNS name of the company reversed, in this case, "com.sun". Everything following is a unique ID that Oracle uses to identify the target. iSCSI Target Properties...
  • Page 155: San Iscsi Initiator Configuration

    Configuring SRP Targets (CLI) On clustered platforms, targets which have at least one active interface on that cluster node will be online. Take care when assigning interfaces to targets; a target may be configured to use portal groups on disjoint head nodes. In that situation, the target will be online on both heads yet will export different LUNs depending on the storage owned by each head node.
  • Page 156 Related Topics Configuring FC Port Modes (BUI) ■ Discovering FC Ports (BUI) ■ Creating FC Initiator Groups (BUI) ■ Associating a LUN with an FC Initiator Group (BUI) ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 157: San Srp Configuration

    Configuring SRP Targets (CLI) Changing FC Port Modes (CLI) ■ Discovering FC Ports (CLI) ■ Creating FC Initiator Groups (CLI) ■ Associating a LUN with an FC Initiator Group (CLI) ■ Scripting Aliases for Initiators and Initiator Groups (CLI) ■ Configuring SAN iSCSI Initiators ■...
  • Page 158: San Terminology

    ■ Configuring SRP Target (BUI) ■ Configuring SRP Targets (CLI) ■ SAN Terminology To configure the appliance to operate on a SAN, you should understand some basic SAN terms: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 159 Configuring SRP Targets (CLI) SAN Terminology TABLE 34 Term Description SCSI Target A SCSI Target is a storage system end-point that provides a service of processing SCSI commands and I/O requests from an initiator. A SCSI Target is created by the storage system's administrator, and is identified by unique addressing methods.
  • Page 160: Configuring Users

    BUI or CLI. To configure users and roles, use the following sections: Adding an Administrator or User BUI, ■ Changing a User Password BUI, ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 161: Adding An Administrator Or User (Bui)

    Adding an Administrator or User (BUI) Editing Exceptions for a User BUI, ■ Deleting Exceptions for a User BUI, ■ Adding a Role BUI, ■ Editing Authorizations for a Role BUI, ■ Deleting Authorizations from a Role BUI, ■ Adding a User Who can Only View the Dashboard ■...
  • Page 162 Click the checkboxes for the exceptions you want to add. Click ADD in the Exceptions section. Click ADD at the top of the dialog box. The new user appears in the Users list. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 163: Adding An Administrator Or User (Cli)

    Adding an Administrator or User (CLI) Related Topics Understanding Users and Roles ■ User Authorizations ■ Managing User Properties ■ Adding an Administrator or User (CLI) Use the following procedure to create a user with or without the administrator roles. For a description of user types, see “Understanding Users and Roles”...
  • Page 164 = basic (uncommitted) hostname:configuration users john > commit hostname:configuration users > select john hostname:configuration users john > show Properties: logname = john type = local uid = fullname = Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 165: Changing A User Password (Bui)

    Changing a User Password (BUI) initial_password = ************* require_annotation = false roles = basic kiosk_mode = false kiosk_screen = status/dashboard Children: exceptions => Configure this user's exceptions preferences => Configure user preferences Related Topics Understanding Users and Roles ■ User Authorizations ■...
  • Page 166: Changing A User Password (Cli)

    > set initial_password=[new password] initial_password = ************* (uncommitted) Enter commit. hostname:configuration users root > commit Related Topics Editing Exceptions for a User ■ Editing Authorizations for a Role ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 167: Editing Exceptions For A User (Bui)

    Editing Exceptions for a User (BUI) Editing Exceptions for a User (BUI) Use the following procedure to edit exceptions for a user. Go to Configuration > Users. Hover over the user in the Users list, and click the edit icon Click on Exceptions.
  • Page 168 > Example 4 Adding an Exception to Include Scope Authorizations This example adds an exception to include a scope authorization that is not part of the role "webadmin": Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 169: Deleting Exceptions For A User (Bui)

    Deleting Exceptions for a User (BUI) hostname:configuration users brendan exceptions > create hostname:configuration users brendan auth (uncommitted) > set scope=appliance scope = appliance hostname:configuration users brendan auth (uncommitted) > show Properties: scope = appliance service = * allow_audit = false allow_factoryReset = false allow_powerOff = false allow_reboot = false...
  • Page 170: Deleting Exceptions For A User (Cli)

    > ls Properties: logname = john type = local uid = 2000000001 fullname = john initial_password = ************* require_annotation = false kiosk_mode = false kiosk_screen = status/dashboard Children: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 171: Adding A Role (Bui)

    Adding a Role (BUI) exceptions => Configure this user's exceptions preferences => Configure user preferences hostname:configuration users john > exceptions hostname:configuration users john exceptions > show Auths: NAME OBJECT PERMISSIONS auth-000 ad.* domain workgroup hostname:configuration users john exceptions > destroy auth-000 This will destroy "auth-000".
  • Page 172: Adding A Role (Cli)

    > role webadmin hostname:configuration roles webadmin (uncommitted) > set description="web server administrator" description = web server administrator (uncommitted) hostname:configuration roles webadmin (uncommitted) > commit Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 173: Editing Authorizations For A Role (Bui)

    Editing Authorizations for a Role (BUI) hostname:configuration roles > show Roles: NAME DESCRIPTION basic Basic administration webadmin web server administrator Related Topics Understanding Users and Roles ■ User Authorizations ■ Managing User Properties ■ Editing Authorizations for a Role (BUI) A role is a collection of privileges that can be assigned to a user.
  • Page 174: Editing Authorizations For A Role (Cli)

    (uncommitted) > set scope=svc scope = svc hostname:configuration roles webadmin auth (uncommitted) > show Properties: scope = svc service = * allow_administer = false Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 175: Deleting Authorizations From A Role (Bui)

    Deleting Authorizations from a Role (BUI) allow_configure = false allow_restart = false hostname:configuration roles webadmin auth (uncommitted) > set service=tab ipmp http iscsi tags identity ldap routing vscan datalink:igb0 idmap ndmp scrk interface:igb0 nfs snmp hostname:configuration roles webadmin auth (uncommitted) > set service=http service = http (uncommitted) hostname:configuration roles webadmin auth (uncommitted) >...
  • Page 176: Deleting Authorizations From A Role (Cli)

    User Authorizations ■ Managing User Properties ■ Adding a User Who Can View the Dashboard Use the following procedure to add a user who can only view the dashboard. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 177: Understanding Users And Roles

    Adding a User Who Can View the Dashboard Add either a Directory or Local user as described in “Adding an Administrator or User (BUI)” on page 161. Select the Kiosk user checkbox. Ensure the Kiosk screen is set to status/ dashboard.
  • Page 178: User Authorizations

    Manage online and offline disks Keystores keystore Configure keystores Networking Configure networking devices, datalinks, and interfaces Projects and shares Change general properties Pool, project, share of projects and shares Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 179: Managing User Properties

    Adding a User Who Can View the Dashboard Scope BUI Scope CLI Example Authorization Example Filter Roles role Configure authorizations Role name for a role stmf Configure authorizations for SAN Services Restart a service Service name Shares property schema schema Modify property schema Update update...
  • Page 180 The following properties can be set when managing roles: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 181: Setting Appliance Preferences

    Setting Appliance Preferences Role Properties TABLE 38 Property Description Name Name of the role as it will be shown in lists Description Verbose description of role if desired Exceptions Exceptions for this role Related Topics Adding an Administrator or User BUI, ■...
  • Page 182: Setting Preferences (Cli)

    This example shows setting the session annotation property, which can only be set for the currently logged in user. hostname:> configuration preferences hostname:configuration preferences> show Properties: locale = C login_screen = status/dashboard session_timeout = 15 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 183: Setting Ssh Public Keys (Bui)

    Setting SSH Public Keys (BUI) session_annotation = advanced_analytics = false Children: keys => Manage SSH public keys hostname:configuration preferences> set session_annotation="Editing my user preferences" session_annotation = Editing my user preferences (uncommitted) hostname:configuration preferences> commit Setting Preferences for a Different User Account Example 10 To set preferences for a different user account, use the following CLI commands.
  • Page 184: Setting Ssh Public Keys (Cli)

    (uncommitted)> set key="...DSA key text..." key = ...DSA key text...(uncommitted) hostname:configuration preferences key (uncommitted)> set comment="fw-log1" comment = fw-log1 (uncommitted) hostname:configuration preferences key (uncommitted)> commit hostname:configuration preferences keys> show Keys: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 185: Preference Properties

    Setting SSH Public Keys (CLI) NAME MODIFIED TYPE COMMENT key-000 07/12/2015 10:54:58 fw-log1 Example 12 Setting SSH Public Keys for a Different User Account To set SSH public keys for a different user account, use the following CLI commands. hostname:> configuration users hostname:configuration users>...
  • Page 186: Configuring Alerts

    Sending Syslog Messages ■ Executing a Workflow ■ Threshold Alerts ■ Resuming/Suspending Datasets and Worksheets ■ Adding an Alert Action (BUI) Click the add icon next to "Alert actions". Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 187: Adding An Alert Action (Cli)

    Adding an Alert Action (CLI) Select the Category, or pick "All events" for everything. Either pick All Events, or a Subset of Events. If the subset is selected, customize the checkbox list to match the desired alerts events. Use the drop down menu in "Alert actions" to select which alert type. Enter details for the Alert action.
  • Page 188: Sending Email Alerts (Cli)

    SMTP service screen. From aknobody@caji.com Mon Oct 13 15:24:47 2009 Date: Mon, 13 Oct 2009 15:24:21 +0000 (GMT) From: Appliance on caji <noreply@caji.com> Subject: High CPU on caji To: admin@hostname.com Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 189: Sending An Snmp Trap (Cli)

    Adding an Alert Action (CLI) SUNW-MSG-ID: AK-8000-TT, TYPE: Alert, VER: 1, SEVERITY: Minor EVENT-TIME: Mon Oct 13 15:24:12 2009 PLATFORM: i86pc, CSN: 0809QAU005, HOSTNAME: caji SOURCE: svc:/appliance/kit/akd:default, REV: 1.0 EVENT-ID: 15a53214-c4e7-eae4-dae6-a652a51ea29b DESC: cpu.utilization threshold of 90 is violated. AUTO-RESPONSE: None. IMPACT: The impact depends on what statistic is being monitored.
  • Page 190: Alert Categories

    When the Syslog service is enabled, a syslog message containing alert details can be sent to one or more remote systems. For more information about sending syslog messages, see Syslog Relay service. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 191: Threshold Alerts

    Repost alert every 5 minutes while this condition persists. Also post alert when this condition clears for at least 5 minutes. Related Topics “Configuring a Threshold Alert (BUI)” in Oracle ZFS Storage Appliance Analytics Guide, ■ Release OS8.6.x Configuring the Appliance...
  • Page 192: Resuming/Suspending Analytics Datasets And Worksheets

    Adding an Alert Action (CLI) “Configuring a Threshold Alert (CLI)” in Oracle ZFS Storage Appliance Analytics Guide, ■ Release OS8.6.x Adding an Alert Action (BUI) ■ Adding an Alert Action (CLI) ■ Sending Email Alerts (CLI) ■ Sending an SNMP Trap (CLI) ■...
  • Page 193: Appliance Cluster Configuration

    Oracle ZFS Storage Appliances. If you are configuring clustering for two new controllers, follow the procedure Note - “Configuring the Appliance for the First Time” in Oracle ZFS Storage Appliance Installation Guide. For tasks related to appliance clustering, see: “Connecting Cluster Cables”...
  • Page 194 The BUI contains the following buttons: Cluster Interface Buttons TABLE 42 Button Description Setup If the cluster is not yet configured, execute the cluster setup guided task, and then return to the current screen. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 195: Upgrading A Standalone Appliance To A Clustered Configuration (Bui)

    CLUSTERED or STRIPPED, force the other appliance to reboot, and take-over its resources, making the current appliance the OWNER. Related Topics “Performing Initial Configuration (BUI)” in Oracle ZFS Storage Appliance Installation ■ Guide “Upgrading a Standalone Appliance to a Clustered Configuration (BUI)” on page 195 ■...
  • Page 196 Go to Configuration > Network and click the add icon next to Interfaces. Enter a name for the management interface, and check the boxes for Enable Interface and Allow Administration. Select an IP address and click APPLY. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 197: Shutting Down A Clustered Configuration (Bui)

    Shutting Down a Clustered Configuration (BUI) Go to Configuration > Cluster and click FAILBACK to bring the cluster to Active: Active mode. The two controllers are now configured as clustered peers. On the second controller, go to Configuration > Cluster and click the lock icon for the management interface.
  • Page 198 From the BUI of Controller A, click the power icon on the left side under the masthead. (Optional) To confirm that both controllers are powered off, log into the Oracle ILOM and enter : ->show /SYS power_state For information about accessing ILOM, see “Logging in to Oracle ILOM Remotely Using a...
  • Page 199: Shutting Down A Clustered Configuration (Cli)

    Shutting Down a Clustered Configuration (CLI) For more information, see “Powering Off a Disk Shelf” in Oracle ZFS Storage Appliance Installation Guide. Shutting Down a Clustered Configuration (CLI) Use this procedure to shut down a clustered configuration. For the purpose of this procedure, the clustered controllers are referred to as Note - controller-a and controller-b.
  • Page 200 / controller-a:> maintenance system poweroff This will turn off power to the appliance. Are you sure? (Y/N) Y (Optional) To confirm that both controllers are powered off, log into the Oracle ILOM and enter: ->show /SYS power_state For information about accessing ILOM, see “Logging in to Oracle ILOM Remotely Using a...
  • Page 201: Cluster Terminology

    Disconnect the power cords from the external power source for the cabinet. Note - All power cords must be disconnected to completely remove power from the disk shelf. For more information, see “Powering Off a Disk Shelf” in Oracle ZFS Storage Appliance Installation Guide. Related Topics “Understanding Clustering” on page 201 ■...
  • Page 202 You are replacing a failed storage controller with new hardware or a storage controller with ■ factory-fresh appliance software (typically this replacement is performed by your service provider). Because of the possibility of data loss to unconfigure clustering, contact Oracle support. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 203: Cluster Advantages And Disadvantages

    Shutting Down a Clustered Configuration (CLI) Cluster Advantages and Disadvantages It is important to understand the scope of the Oracle ZFS Storage Appliance clustering implementation. The term 'cluster' is used in the industry to refer to many different technologies with a variety of purposes. We use it here to mean a metasystem comprised of two appliance controllers and shared storage, used to provide improved availability in the case in which one of the controllers succumbs to certain hardware or software failures.
  • Page 204 Whether that cost/benefit analysis will favor the use of clustering in an Oracle ZFS Storage Appliance deployment will depend on local factors such as SLA terms, available support personnel and their qualifications, budget constraints, the perceived likelihood of various possible failures, and the appropriateness of alternative strategies for enhancing availability.
  • Page 205: Cluster Interconnect I/O

    The serial links used by the Oracle ZFS Storage Appliances are not susceptible to this failure mode. The Ethernet link provides a higher-performance transport for non-heartbeat messages such as rejoin synchronization and provides a backup heartbeat.
  • Page 206: Cluster Resource Management

    ■ panic. All of the values described in this section are fixed; as an appliance, the Oracle ZFS Storage Appliance does not offer the ability (nor is there any need) to tune these parameters. They are considered implementation details and are provided here for informational purposes only. They may be changed without notice at any time.
  • Page 207 Shutting Down a Clustered Configuration (CLI) failed controller to its surviving peer and include network interfaces and storage pools. Because a network interface is a collection of IP addresses used by clients to find a known set of storage services, it is critical that each interface be assigned to the same controller as the storage pool clients will expect to see when accessing that interface's address(es).
  • Page 208: Oracle Zfs Storage Appliance Administration Guide, Release Os8.6.X • September

    SSL certificates used to access the BUI. The basic model, then, is that common configuration is transparently replicated, and administrators will assign a collection of resources to each appliance controller. Those resource Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 209: Cluster Takeover And Failback

    Shutting Down a Clustered Configuration (CLI) assignments in turn form the binding of network addresses to storage resources that clients expect to see. Regardless of which appliance controls the collection of resources, clients are able to access the storage they require at the network locations they expect. Related Topics “Shutting Down a Clustered Configuration (CLI)”...
  • Page 210 So while failback to a previously-failed controller will never occur automatically, it may still perform takeover at any time. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 211: Configuration Changes In A Clustered Environment

    Shutting Down a Clustered Configuration (CLI) After you set up a cluster, the initial state consists of the node that initiated the setup in the OWNER state and the other node in the STRIPPED state. After performing an initial failback operation to hand the STRIPPED node its portion of the shared resources, both nodes are CLUSTERED.
  • Page 212: Clustering Considerations For Storage

    This is especially true of the Oracle ZFS Storage Appliance, in which no mechanism exists for making independent changes to system configuration on each controller. This simplification largely...
  • Page 213 In this case, read performance is sustained. For external read cache configuration details, see “Disk Shelf Configurations” in Oracle ZFS Storage Appliance Customer Service Manual. Configuring NSPF - A second important consideration for storage is the use of pool configurations with no single point of failure (NSPF).
  • Page 214: Clustering Considerations For Networking

    Network device, datalink, and interface failures do not cause a clustered subsystem controller to fail. To protect against network failures inside or outside of the appliance, IPMP and/or LACP Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 215 Each slot in both controllers must be populated with identical hardware and slots must be populated in the same order on both controllers. Your qualified Oracle reseller or service representative can assist in planning hardware upgrades that meet these requirements.
  • Page 216: Private Local Ip Interfaces

    The IPMP group type is set only at creation, and is determined by the type of underlying ■ links. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 217: Clustering Considerations For Infiniband

    Shutting Down a Clustered Configuration (CLI) IP interfaces that belong to IPMP groups do not appear on the Cluster:Resources page ■ because IP interface ownership cannot be modified independently of the IPMP group ownership. Private IPMP groups do not appear in the Cluster:Resources page because this type or ■...
  • Page 218 Shutting Down a Clustered Configuration (CLI) clustering rules described earlier. Your qualified Oracle reseller or service representative can assist in planning hardware upgrades that will meet these requirements. The following illustration shows cluster configuration for subnet manager redundancy. Greater redundancy is achieved by connecting two dual-port HCAs to a redundant pair of server switches.
  • Page 219: Preventing Split-Brain Conditions

    The canonical trigger for this condition is the failure of the communication medium shared by the controllers; in the case of the Oracle ZFS Storage Appliance, this would occur if the cluster I/O links fail. In addition to the built-in triple-link...
  • Page 220 Shutting Down a Clustered Configuration (CLI) embedded in the Oracle ZFS Storage Appliance is designed to ensure that there is no single point of failure, and to protect both data and availability against any plausible failure without adding undue cost or complexity to the system. It is still possible that massive multiple failures will cause loss of service and/or data, in much the same way that no RAID layout can protect against an unlimited number of disk failures.
  • Page 221: Estimating And Reducing Takeover Impact

    I/O typically cannot be performed. The duration of this grace period can be tuned in the Oracle ZFS Storage Appliance; reducing it will reduce the apparent impact of takeover and/or failback. For planned outages, the Oracle ZFS Storage Appliance provides grace-less recovery for NFSv4 clients, which avoids the grace period delay.
  • Page 222 Note that while diskset import usually comprises the bulk of takeover time, it is not the only factor. During the pool import process, any intent log records must be replayed, and each share Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 223 Shutting Down a Clustered Configuration (CLI) and LUN must be shared via the appropriate service(s). The amount of time required to perform these activities for a single share or LUN is very small - on the order of tens of milliseconds - but with very large share counts this can contribute significantly to takeover times.
  • Page 224 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 225: Appliance Services

    Appliance Services Appliance services are easily managed from the BUI Configuration > Services screen or the CLI configuration services context. Use the following tasks for viewing and managing appliance services: “Viewing a Service in the BUI” on page 226 ■ “Selecting a Service in the CLI”...
  • Page 226: Managing Services

    Services title (near the top left of each screen). Click this icon again to hide the list. Related Topics “Enabling a Service (BUI)” on page 227 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 227: Selecting A Service In The Cli

    Selecting a Service in the CLI “Setting Service Properties (BUI)” on page 230 ■ “List of Available Appliance Services” on page 234 ■ “Required Service Ports” on page 236 ■ Selecting a Service in the CLI After you select a service, you can view its state, enable it, disable it, and set its properties. Go to configuration services.
  • Page 228: Enabling A Service (Cli)

    “List of Available Appliance Services” on page 234 ■ “Required Service Ports” on page 236 ■ Disabling a Service (CLI) Use the following procedure to disable a service that is online. Go to configuration services. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 229: Viewing Service States In The Cli

    Viewing Service States in the CLI Select the service, then enter disable command to disable it. hostname:configuration services> nis hostname:configuration services nis> disable Related Topics “Enabling a Service (CLI)” on page 228 ■ “List of Available Appliance Services” on page 234 ■...
  • Page 230: Setting Service Properties (Bui)

    Setting Service Properties (BUI) The Configuration > Services screens allow you to view and modify the services. The following table describes the icons and buttons in the services screens. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 231: Setting Service Properties (Cli)

    Setting Service Properties (CLI) Icon Description Go to the service screen to configure properties and view logs. This button appears when you hover over a service. The service is enabled and working normally. The service is offline or disabled. The service has a problem and requires operator attention. Enables or disables the service.
  • Page 232: Viewing Service Logs (Bui)

    Log content is specific to each individual service and is subject to change. Go to Configuration > Services and double-click a service. Click the Logs button at the top right of a service screen. The following are common example messages: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 233: Viewing Service Logs (Cli)

    Viewing Service Logs (CLI) Example Log Message Description Executing start method The service is starting up Method "start" exited with status 0 The service reported a successful start (0 == success) Method "refresh" exited with status 0 The service successfully refreshed its configuration based on its service settings Executing stop method The service is being shut down...
  • Page 234: List Of Available Appliance Services

    Their use by end-system users or vendors of layered products is not supported and may cause security-related issues with future applications. Directory Services TABLE 47 Service Description Ports Used Authenticate users and groups from an NIS service Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 235 Viewing Service Logs (CLI) Service Description Ports Used LDAP Authenticate users and groups from an LDAP directory Active Directory Authenticate users with a Microsoft Active Directory Server Once enabled, this becomes an always-on service, and Note - cannot be disabled Identity Mapping Map between Windows entities and UNIX IDs Note -...
  • Page 236: Required Service Ports

    For Kerberos ports, see “Configuring Kerberos Realms for NFS” on page 240. Configuring Services For information about configuring a service, select one of the services from the following table: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 237: Nfs Configuration

    NFS Configuration Network File System (NFS) is an industry standard protocol to share files over a network. The Oracle ZFS Storage Appliance supports NFS versions 2, 3, and 4. For more information on how the filesystem namespace is constructed, see “Working with Filesystem...
  • Page 238 The Oracle ZFS Storage Appliance provides grace-less recovery of the locking state for NFSv4 clients during planned outages. Planned outages occur during events such as...
  • Page 239 ■ used only to set up the system's Kerberos service principals and is not retained. Oracle Intelligent Storage Protocol - The NFSv4 service includes support for the Oracle ■ Intelligent Storage Protocol, which lets Oracle Database NFSv4 clients pass optimization information to the ZFS Storage Appliance NFSv4 server.
  • Page 240 NFS Logs and Analytics These logs are available for the NFS service: TABLE 51 Logs Available for NFS Description network-nfs-server:default Master NFS server log appliance-kit-nfsconf:default Log of appliance NFS configuration events Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 241 Configuring Services Description network-nfs-cbd:default Log for the NFSv4 callback daemon network-nfs-mapid:default Log for the NFSv4 mapid daemon - which maps NFSv4 user and group credentials network-nfs-status:default Log for the NFS statd daemon - which assists crash and recovery functions for NFS locks network-nfs-nlockmgr:default Log for the NFS lockd daemon - which supports record locking operations for files...
  • Page 242: Iscsi Configuration

    Use iSNS Whether iSNS discovery is enabled iSNS Server An iSNS server Use RADIUS Whether RADIUS is enabled RADIUS Server A RADIUS server RADIUS Server Secret The RADIUS server's secret Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 243: Smb Configuration

    Sharing a Filesystem Over NFS If the local initiator has a CHAP name and a CHAP secret, the system performs authentication. If the local initiator does not have the CHAP properties, the system does not perform any authentication and therefore all initiators are eligible for authorization. The iSCSI service allows you to specify a global list of initiators that you can use within initiator groups.
  • Page 244 Active Directory site - The site to use when joining an Active Directory domain. A site is ■ a logical collection of machines which are all connected with high bandwidth, low latency Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 245 ■ NTLMv2). For more information on the supported authentication modes within each compatibility level, consult the Oracle Solaris Information Library for smb. NTLMv2 is the recommended minimum security level to avoid publicly known security vulnerabilities. SMB signing enabled - Enables interoperability with SMB clients using the SMB signing ■...
  • Page 246 Configure the Active Directory service. See “Active Directory ■ Configuration” on page 293. Establish an Identity Mapping strategy and configure the service. See “Identity Mapping ■ Configuration” on page 299. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 247 Sharing a Filesystem Over NFS Configure SMB. See “SMB Configuration” on page 243. ■ Configure access control, ACL entries, and ACL inheritance on shares. ■ SMB and NFSv3 do not use the same access control model. For best results, configure the ACL on the root directory from a SMB client as the SMB access control model is a more verbose model.
  • Page 248 NA| NA| NA| property ttl (view) NA| NA| NA| property ttl set NA| NA| NA| property state (view) NA| NA| NA| property state offline NA| NA| NA| Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 249 Adding DFS Namespaces to a Local SMB Group property state online NA| NA| NA| DFS GUI: add standalone root remove standalone root change root comment change root timeout add link remove link change link comment change link timeout add link's target remove link's target enable link's referral (target) disable link's referral (target)
  • Page 250 "&" and "?" refer to a user's login and its corresponding first character. Directory - Sets the directory for the rule, for example: /export/wdp. ■ Adding SMB Autohome Rules (CLI) Go to configuration services smb. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 251 Adding SMB Autohome Rules (CLI) Use the create command to add autohome rules, and the list command to list existing rules. This example adds a rule for the user "Bill" then lists the rules: hostname:> configuration services smb hostname:configuration services smb> create hostname:configuration services rule (uncommitted)>...
  • Page 252 Microsoft Management Console tools, that may be used to configure, monitor and manage local and remote services and resources. In order to use the MMC functionality on the Oracle ZFS Storage Appliance in workgroup mode, be sure to add the Windows administrator who will use the management console to the...
  • Page 253 The Oracle ZFS Storage Appliance supports the following Computer Management facilities: The Event Viewer MMC snap-in displays the Application log, Security log, and System log. These logs show the contents of the alert, audit, and system logs of the Oracle ZFS Storage system.
  • Page 254 SMB Share Management Support for share management includes the following: Listing shares ■ Setting ACLs on shares ■ Changing share permissions ■ Setting the description of a share ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 255 Adding a User to an SMB Local Group Features not currently supported via MMC include the following: Adding or Deleting a share ■ Setting client side caching property ■ Setting maximum allowed or number of users property ■ The following screen shows an examle of permission properties for a share. FIGURE 25 SMB Share Permission Properties Appliance Services...
  • Page 256 Closing open files ■ The following screen shows an example of open files per connection. FIGURE 26 Open Files per Connection The following screen shows an example of open sessions. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 257 Adding a User to an SMB Local Group Open Sessions FIGURE 27 Listing SMB Services Listing of appliance services is supported using the MMC application. However, you cannot enable or disable services using the MMC application. Support includes listing of appliance services.
  • Page 258 Adding a User to an SMB Local Group vscan Properties FIGURE 28 To ensure that only the appropriate users have access to administrative operations, there are some access restrictions on the operations performed remotely using MMC. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 259 Configuring SMB (BUI) Users and Allowed Operations TABLE 56 User Allowed Operations Regular users List shares. Members of the Administrators or Power Users groups Manage shares, list user connections. Members of the Administrators group List open files and close files, disconnect user connections, view services and event log.
  • Page 260 Oracle. Enter your Online Account user name and password. A privacy statement will be displayed for your review. Choose which of your inventory teams to register with. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 261 Configuring SMB Active Directory (BUI) The default team for each account is the same as the account user name, prefixed with a '$'. Commit your initial configuration changes. Configuring SMB Active Directory (BUI) Create an account for the appliance in the Active Directory domain. For detailed instructions, refer to “Active Directory Configuration”...
  • Page 262: Ftp Configuration

    “Adding FTP Access to a Share (BUI)” on page 262 ■ “FTP Properties” on page 263 ■ “FTP Logs” on page 264 ■ Adding FTP Access to a Share (BUI) Go to Configuration > Services. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 263 Adding FTP Access to a Share (BUI) Ensure that the FTP service is enabled and online. If not, enable the service. Select or add a share in the Shares screen. Click the Protocols tab, and check that FTP access is enabled. (Optional) Set the Share mode access to Read only or Read/write.
  • Page 264: Http Configuration

    The URL to access these HTTP and HTTPS shares have the following formats respectively: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 265 Adding HTTP Access to a Share (BUI) http://hostname/shares/mountpoint/share_name ■ https://hostname/shares/mountpoint/share_name ■ The HTTPS server uses a self-signed security certificate. ■ To configure HTTP, see the following sections: “Adding HTTP Access to a Share (BUI)” on page 265 ■ “HTTP Properties and Logs” on page 265 ■...
  • Page 266 Created files have Unix permissions 666 (readable and writable by everyone), and created directories have Unix permissions 777 (readable, writable, and executable by everyone). Related Topics “Adding HTTP Access to a Share (BUI)” on page 265 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 267: Ndmp Configuration

    NDMP cannot be used to back up and restore system configuration data. Instead, use the Configuration Backup and Restore feature (see “Backing Up the Configuration” in Oracle ZFS Storage Appliance Customer Service Manual). To configure NDMP, see the following sections: “NDMP Local vs.
  • Page 268 /export/home, then the share mounted at that path will be backed up. Similarly, if a backup stream is restored to /export/code, then that's the path where files will be restored, even if they were backed up from another path. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 269 Adding HTTP Access to a Share (BUI) Only paths that are mountpoints of existing shares, or contained within existing shares, may be specified for backup. If the backup path matches a share's mountpoint, only that share is backed up. Otherwise the path must be contained within a share, in which case only the portion of that share under that path is backed up.
  • Page 270 Because level-based incremental backups using the "zfs" backup type require a base snapshot from the previous incremental, the default behavior for level backups for which a new snapshot Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 271 Adding HTTP Access to a Share (BUI) is created is to keep the new snapshot so that it can be used for subsequent incremental backups. If the DMA indicates that the backup will not be used for subsequent incremental backups by setting UPDATE=n, the newly created snapshot is destroyed after the backup.
  • Page 272 NDMP environment variable "ZFS_FORCE" with value "y" or by configuring the "Rollback datasets" property of the NDMP service (see “NDMP Properties and Logs” on page 274). Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 273 Adding HTTP Access to a Share (BUI) Replica Backups The Oracle ZFS Storage Appliance supports direct backup of replicas and replica snapshots with the "zfs" backup type. It is not necessary to first clone a replica dataset (project or share) in order to back it up.
  • Page 274 "tar" and "dump" backups and is disabled by default. Target restore pool(s) When you perform a full restore using "tar" or "dump", the system re-creates datasets if there is no share Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 275 Adding HTTP Access to a Share (BUI) Property Description mounted at the target. Because the NDMP protocol specifies only the mount point, the system chooses a pool in which to recreate projects and shares. On a system with multiple pools, this property lets you specify one or more pools.
  • Page 276: Shadow Migration Configuration

    Anonymous logins are not allowed, users must authenticate with whichever name service is configured in Services. To configure SFTP, see the following sections: “Adding SFTP Access to a Share (BUI)” on page 277 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 277 Adding SFTP Access to a Share (BUI) “Configuring SFTP for Remote Access (CLI)” on page 277 ■ “SFTP Properties, Ports, and Logs” on page 279 ■ Adding SFTP Access to a Share (BUI) Go to Configuration > Services. Check that the SFTP service is enabled and online. If not, enable the service. Go to Shares >...
  • Page 278 -v -o "IdentityFile=/home/<username>/.ssh/id_dsa" -o "port=218" root 10.x.xx.151:/export/sftp Related Topics “Adding SFTP Access to a Share (BUI)” on page 277 ■ “SFTP Properties, Ports, and Logs” on page 279 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 279: Srp Configuration

    Configuring SFTP for Remote Access (CLI) SFTP Properties, Ports, and Logs SFTP Properties SFTP Properties TABLE 67 Property Description Port (for incoming The port SFTP listens on. The default is 218. connections) Permit root login Allows SFTP logins for the root user. This property is off by default. Logging level The verbosity of SFTP log messages SFTP Keys...
  • Page 280: Tftp Configuration

    Once a file has been scanned with the latest virus definitions, it is not rescanned until it is next modified. Files accessed by NFS clients that Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 281 Configuring Virus Scanning for a Share (BUI) have cached file data, or been delegated read privileges by the NFSv4 server, may not be immediately quarantined. To configure Virus Scan, see the following sections: “Configuring Virus Scanning for a Share (BUI)” on page 281 ■...
  • Page 282 For example, to scan only high-risk files, including zip files, but not files with names that match the pattern "data-archive*.zip", you could configure the following settings: TABLE 71 Virus Scan File Extensions Action Pattern Scan Scan Scan Scan Scan Don't Scan data-archive*.zip Don't Scan Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 283 Configuring Virus Scanning for a Share (BUI) You must use "Don't Scan *" to exclude all other file types not explicitly included in the Note - scan list. A file named file.name.exe.bat.jpg123 would not be scanned, as only the "jpg123" portion of the name, the extension, would be compared against the rules.
  • Page 284: Nis Configuration

    Set the NIS domain and server properties. Click APPLY to commit the configuration. Go to Configuration > Users. Add a user with type "directory". Set the username to their NIS username. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 285: Ldap Configuration

    Adding an Appliance Administrator from NIS (BUI) Continue with the instructions in “Configuring Users” on page 160 for adding authorizations to this user. Related Topics “NIS Properties and Logs” on page 285 ■ NIS Properties and Logs TABLE 74 NIS Properties Property Description Domain...
  • Page 286 “LDAP Properties” on page 290. To configure the LDAP server, in the New LDAP Server box, enter the LDAP server Address and select the LDAP Certificate source that you want to use. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 287 Setting Properties with Multiple Attribute Value Pairs (CLI) For the Certificate source, select Server to search the current server and retrieve the certificate (in an insecure manner), and use it to validate the certificate presented later. Go to Configuration > Users, and add users as needed using LDAP usernames. For information about adding users, see “Configuring Users”...
  • Page 288 = proxy_password = base_dn = search_scope = one cred_level = anonymous auth_method = none use_tls = false user_search = user_mapattr = user_mapobjclass = group_search = group_mapattr = group_mapobjclass = Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 289 Configuring LDAP Security Settings (CLI) netgroup_search = netgroup_mapattr = netgroup_mapobjclass = To set the credential level, enter set cred_level= and one of the following options: anonymous - Allows anonymous authentication for access to data available to everyone. ■ self- Provides self-authentication for users based on their identity and credentials. Self- ■...
  • Page 290 Enable SSL/TLS - Toggles TLS (Transport Layer Security, the descendant of SSL) to ■ establish secure connections to the LDAP server. If authenticating as Self, this option is unavailable because Self uses Kerberos encryption. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 291 Configuring LDAP Security Settings (CLI) Authentication method - Method used to authenticate the appliance to the LDAP server. ■ You can only configure this setting if authenticating as Proxy. LDAP Servers Servers- List of LDAP servers to use. If only one server is specified, the appliance uses ■...
  • Page 292 Related Topics “Adding an Appliance Administrator (BUI)” on page 286 ■ “Setting Properties with Multiple Attribute Value Pairs (CLI)” on page 287 ■ “LDAP Properties” on page 290 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 293: Active Directory Configuration

    Joining an AD Domain (BUI) Active Directory Configuration The Active Directory service provides access to a Microsoft Active Directory database, which stores information about users, groups, shares, and other shared objects. This service has two modes: domain and workgroup mode, which dictate how SMB users are authenticated. When operating in domain mode, SMB clients are authenticated through the AD domain controller.
  • Page 294 => Join a Windows workgroup Observe that the appliance is currently operating in the domain eng.fishworks. com. Following is an example of leaving that domain and joining a workgroup. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 295 Configuring Active Directory (CLI) hostname:configuration services ad> workgroup hostname:configuration services ad workgroup> set workgroup=WORKGROUP hostname:configuration services ad workgroup> commit hostname:configuration services ad workgroup> done hostname:configuration services ad> show Properties: <status> = disabled mode = workgroup workgroup = WORKGROUP To configure the site and preferred domain controller in preparation for joining another domain, enter the following commands: hostname:configuration services ad>...
  • Page 296 “Joining an AD Workgroup (BUI)” on page 294 ■ “Configuring Active Directory (CLI)” on page 294 ■ “Active Directory Domains and Workgroups” on page 297 ■ “Active Directory Windows Server Support” on page 297 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 297 Configuring Active Directory (CLI) Active Directory Domains and Workgroups The configurable property for joining a workgroup is Windows Workgroup. Instead of enabling and disabling the service directly, the service is modified by joining a domain or a workgroup. Joining a domain involves creating an account for the appliance in the given Active Directory domain.
  • Page 298 “Joining an AD Workgroup (BUI)” on page 294 ■ “Configuring Active Directory (CLI)” on page 294 ■ “Active Directory Join Domain” on page 296 ■ “Active Directory Domains and Workgroups” on page 297 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 299: Identity Mapping Configuration

    Configuring Identity Mapping (BUI) Identity Mapping Configuration Identity mapping allows you to associate Windows and UNIX identities, thereby allowing an SMB client and an NFS client access to the same set of files. The identity mapping service manages Windows and UNIX user identities simultaneously by creating and maintaining a database of mappings between UNIX user identifiers (UIDs) and group identifiers (GIDs), and Windows security identifiers (SIDs).
  • Page 300 To use directory-based mapping, set directory_based_mapping to name and assign each of the following attributes. ad_unixuser_attr - Name in the Active Directory database of the equivalent UNIX ■ user name Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 301 Creating a Mapping Rule (BUI) ad_unixgroup_attr - Name in the Active Directory database of the equivalent UNIX ■ group name nldap_winname_attr - Name in the LDAP database of the equivalent Windows ■ identity hostname:configuration services idmap> set directory_based_mapping=name hostname:configuration services idmap> set ad_unixuser_attr=demo_unixuser hostname:configuration services idmap>...
  • Page 302 An "allow" mapping rule grants Windows identity credentials from a UNIX identity or vice versa. A "deny" mapping rule blocks a Windows identity from receiving the credentials of a UNIX identity or vice versa. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 303 Creating a Mapping Rule (CLI) if you create a mapping rule that blocks a particular user and the user's name then Note - changes, the mapping no longer blocks that user. Configure rule-based mapping as described in “Configuring Identity Mapping Before You Begin (CLI)”...
  • Page 304 Creating a Bi-Directional Mapping (CLI) This example creates a bi-directional name-based mapping between a Windows user and UNIX user. hostname:> configuration services idmap hostname:configuration services idmap> create hostname:configuration services idmap (uncommitted)> set windomain=eng.fishworks.com Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 305 Viewing a Mapping (BUI) hostname:configuration services idmap (uncommitted)> set winname=Bill hostname:configuration services idmap (uncommitted)> set direction=bi hostname:configuration services idmap (uncommitted)> set unixname=wdp hostname:configuration services idmap (uncommitted)> set unixtype=user hostname:configuration services idmap (uncommitted)> commit hostname:configuration services idmap> list MAPPING WINDOWS ENTITY DIRECTION UNIX ENTITY idmap-000...
  • Page 306 Their values remain constant across all operating systems. Flushing Mappings from the Cache (BUI) Use the following procedure to flush, or expire, all mappings from the cache. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 307 Flushing Mappings from the Cache (CLI) After a requested mapping has been provided, it is stored in the cache for 10 minutes and then expires. You can immediately expire a mapping by using the flush function, which expires all cached mappings. Go to Configuration >...
  • Page 308 These parameters are made available through Active Directory using a schema similar to, but not the same as, RFC 2307, and through the NIS Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 309 Flushing Mappings from the Cache (CLI) service. When the IDMU mapping mode is selected, the identity mapping service consumes these UNIX attributes to establish mappings between Windows and UNIX identities. This approach is very similar to directory-based mapping, except that the identity mapping service queries the property schema established by the IDMU software instead of allowing a custom schema.
  • Page 310: Dns Configuration

    ■ “DNS Properties and Logs” on page 311 ■ “Active Directory and DNS” on page 312 ■ “Non-DNS Resolution” on page 312 ■ “DNS-Less Operation” on page 313 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 311 Flushing Mappings from the Cache (CLI) Configuring DNS (CLI) The CLI includes built-ins for nslookup and getent hosts, which can be used to test that hostname resolution is working: hostname:> nslookup deimos 192.168.1.109 deimos.sf.fishworks.com hostname:> getent hosts deimos 192.168.1.109 deimos.sf.fishworks.com DNS Properties and Logs The configurable properties for the DNS client include a base domain name and a list of servers, specified by IP address.
  • Page 312 This can have confusing and seemingly inconsistent results. You can validate host resolution results using the getent CLI command described above. Use of these options is strongly discouraged. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 313: Ipmp Configuration

    Flushing Mappings from the Cache (CLI) DNS-Less Operation If the appliance is unable to access any DNS servers from its installed location in the network, you may elect to operate without DNS by supplying the server address 127.0.0.1. To operate without DNS: BUI: Go to Configuration >...
  • Page 314: Ntp Configuration

    “NTP Properties” on page 316 ■ Setting Clock Synchronization (BUI) This will set the appliance time to match the time of your browser. Go to Configuration > Services > NTP. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 315 Configuring NTP (CLI) Disable the NTP service. Click SYNC. Configuring NTP (CLI) Under configuration services ntp, edit authorizations with the authkey command: hostname:configuration services ntp> authkey hostname:configuration services ntp authkey> From this context, new keys can be added with the create command: hostname:configuration services ntp authkey>...
  • Page 316 NTP Authentication Keys Enter one or more NTP Auth key: 10, Type: ASCII, Private authentication keys for the appliance Key: SUN7000 to use when authenticating the validity of NTP servers. See Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 317: Phone Home Configuration

    Phone Home Configuration The Phone Home service screen is used to manage the appliance registration as well as the Phone Home remote support service. Registration connects your appliance with Oracle Auto Service Request (http://www.oracle. com/us/support/auto-service-request/index.html). Oracle ASR automatically opens Appliance Services...
  • Page 318 “Working with Problems” in Oracle ZFS Storage Appliance Customer Service Manual. Heartbeats - Daily heartbeat messages are sent to Oracle to indicate that the system is up ■ and running. Oracle support may notify the technical contact for an account when one of the activated systems fails to send a heartbeat for too long.
  • Page 319 Auto Service Request (ASR) (http://www.oracle.com/us/support/auto-service-request/index. activation. html) Refer to "How To Manage and Approve Pending ASR Assets In My Oracle Support" (Doc ID 1329200.1). Registering the Appliance (CLI) Go to configuration services scrk. Set soa_id and soa_password to the user name and password for your Oracle Single Sign-On Account, respectively.
  • Page 320: Dynamic Routing Configuration

    Changing Account Information (BUI) Refer to "How To Manage and Approve Pending ASR Assets In My Oracle Support" (Doc ID 1329200.1). Phone Home Properties If the appliance is not directly connected to the Internet, you may need to configure an HTTP proxy through which the Phone Home service can communicate with Oracle.
  • Page 321: Service Tags Configuration

    ■ Software version numbers ■ You can register the service tags with Oracle support, allowing you to easily keep track of your Oracle equipment and also expedite service calls. The service tags are enabled by default. TABLE 88 UDP/TCP Port Properties...
  • Page 322: Snmp Configuration

    “Configuring SNMP to Send Traps (BUI)” on page 323 ■ “SNMP Properties” on page 323 ■ “SNMP MIBs” on page 324 ■ “Sun FM MIB” on page 325 ■ “Sun AK MIB” on page 325 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 323: Snmp Properties

    Configuring SNMP to Serve Appliance Status (BUI) Configuring SNMP to Serve Appliance Status (BUI) Go to Configuration > Services > SNMP. Set the community name, authorized network and contact string. (Optional) Set the trap destination to a remote SNMP host, else set this to 127.0.0.1.
  • Page 324 Sun FM - fault management statistics (MIB file linked below) .1.3.6.1.4.1.42.2.225 Sun AK - appliance information and statistics (MIB file linked below) Sun MIB files are available at https://your IP address or host name:215/docs/snmp/. Note - Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 325 Configuring SNMP to Send Traps (BUI) Sun FM MIB The Sun FM MIB (SUN-FM-MIB.mib) provides access to SUN Fault Manager information such as: Active problems on the system ■ Fault Manager events ■ Fault Manager configuration information ■ There are four main tables to read: TABLE 93 Sun FM MIBs Contents...
  • Page 326: Syslog Configuration

    Syslog Properties Protocol Version - The version of the Syslog protocol to use, either Classic Syslog (RFC ■ 3164) or Updated Syslog (RFC 5424). Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 327 Configuring SNMP to Send Traps (BUI) Destinations - The list of destination IPv4, IPv6, and FQDN addresses to which messages ■ are relayed. To configure syslog, see the following sections: “Classic Syslog: RFC 3164” on page 327 ■ “Updated Syslog: RFC 5424” on page 327 ■...
  • Page 328 MSG-ID format. If a "1" is present in the VER field, parsing code may assume that all of the subsequent fields will be present. Parsing code should be written to handle Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 329 System Identity. SOURCE The subsystem within the appliance software that emitted the event. This field is for Oracle Service use only. The internal revision of the subsystem. This field is for Oracle Service use only. EVENT-ID The Universally Unique Identifier (UUID) associated with this event.
  • Page 330 Most Linux distributions include a bundled sysklogd(8) daemon that can act as a syslog receiver, but the remote receive capability is disabled by default. To enable Linux to receive Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 331: System Identity Configuration

    Configuring SNMP to Send Traps (BUI) syslog traffic, edit the /etc/sysconfig/syslog configuration file such that the -r option is included (enables remote logging): SYSLOGD_OPTIONS="-r -m 0" and then restart the logging service: # /etc/init.d/syslog stop # /etc/init.d/syslog start Some Linux distributions have an ipfilter packet filter that will reject syslog UDP packets by default, and the filter must be modified to permit them.
  • Page 332 Creating a New Certificate (CLI) To create a new certificate, use the following steps. To create a new CSR, enter context configuration services identity certificates, and enter the command create. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 333 Creating a New Certificate (CLI) Or to create a new CSR based on existing CSR or certificate, enter the above context and then the command clone CSR or certificate number. For example: hostname:configuration services identity certificates> clone cert-000 To complete the CSR form, use the following CLI commands. hostname:configuration services identity cert (uncommitted)>...
  • Page 334 Certificates: CERT TYPE FOR ISSUER EXPIRES cert-000 req hostname.us.example.com Joe Test CA 2015-12-4 cert-001 CA Joe Test CA Joe Test CA 2015-1-2 cert-002 cert hostname.us.example.com Joe Test CA 2015-12-3 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 335 Uploading Certificates from Non-root CAs (BUI) Uploading Certificates from Non-root CAs (BUI) If your certificate is signed by a non-root CA, you need to obtain certificates for the second- and higher-level CAs also. After obtaining these CA certificates, use the following steps to upload them.
  • Page 336 Viewing CSR and Certificate Details (CLI) To view CSR and certificate details, use the following steps. To view all certificate entries, go to configuration services identity certificates, and enter the command show. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 337 Properties: uuid = 195071da-66ac-43a6-edfa-bbbd7451f1d5 subject_commonname = hostname.us.example.com issuer_commonname = Joe Test CA issuer_organizationname = Oracle issuer_organizationalunitname = Systems issuer_localityname = Los Angeles issuer_stateorprovincename = California issuer_countryname = US issuer_emailaddress = First.Last@example.com dns = hostname.us.example.com...
  • Page 338 Click the Certificates tab. Hover over an existing entry and click the trash icon Click DESTROY. Destroying a CSR or Certificate (CLI) To destroy a CSR or certificate, use the following steps. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 339 Destroying a CSR or Certificate (CLI) Destroying a CSR also destroys the associated private key. Therefore, importing a Note - certificate derived from that CSR will not be possible. Destroying a certificate also destroys the associated private key. Therefore, re-importing that certificate will not be possible. To view all certificate entries, go to configuration services identity certificates, and enter the command show.
  • Page 340: Ssh Configuration

    Set permit root login to false. Commit the configuration. SSH Properties and Logs TABLE 100 SSH Properties Property Description Examples Server key length The number of bits in the ephemeral key. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 341: Restful Api Configuration

    Log of the SSH service events and errors RESTful API Configuration The Oracle ZFS Storage Appliance RESTful API lets you manage the appliance using simple requests such as GET, PUT, POST, and DELETE HTTP against managed resource URL paths. The appliance RESTful based architecture is defined as a layered client-server model.
  • Page 342 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 343: Shares And Projects

    Shares and Projects The Oracle ZFS Storage Appliance uses storage pools, projects, and shares to organize data. Shares are filesystems and LUNs that are exported over supported data protocols to clients of the appliance. All shares within a project can share common settings, and quotas can be enforced at the project level in addition to the share level.
  • Page 344: Creating A Project (Bui)

    A name must consist of 1 to 64 characters, but not include spaces or begin with a period. Allowable characters are: alphanumeric and special characters _ - . : hostname:shares> project home To list the project properties, use the get command. hostname:shares home(uncommitted)> get Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 345 Creating a Project (CLI) mountpoint = /export (default) quota = 0 (default) reservation = 0 (default) sharesmb = off (default) sharenfs = on (default) encryption = off (default) sharedav = off (default) shareftp = off (default) sharesftp = off (default) sharetftp = off (default) default_group = other (default) default_permissions = 700 (default)
  • Page 346: Editing A Project (Bui)

    To modify project properties, use these steps. Go to shares. hostname:> shares Enter select and a project name. hostname:shares> select home To list the project properties, use the get command. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 347 Editing a Project (CLI) hostname:shares home> get aclinherit = restricted aclmode = discard atime = true checksum = fletcher4 compression = off compressratio = 100 copies = 1 creation = Thu Oct 23 2009 17:30:55 GMT+0000 (UTC) mountpoint = /export quota = 0 readonly = false recordsize = 128K...
  • Page 348: Renaming A Project (Bui)

    Changing a project name will disrupt active client I/O operations. Caution - Disconnect any active clients connected to the project. Go to shares. hostname:> shares To view the projects, use the list command. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 349: Deleting A Project (Bui)

    Deleting a Project (BUI) hostname:shares> list default home Enter rename, the existing project name, and the new project name. A name must consist of 1 to 64 characters, but not include spaces or begin with a period. Allowable characters are: alphanumeric and special characters _ - . : hostname:shares>...
  • Page 350: Creating A Filesystem Or Lun In A Project (Bui)

    “Filesystem Properties” on page 382 ■ “LUN Properties” on page 390 ■ “Inherited Properties” on page 364 ■ “Creating an Encrypted Filesystem or LUN (BUI)” on page 570 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 351: Creating A Filesystem Or Lun In A Project (Cli)

    Creating a Filesystem or LUN in a Project (CLI) Creating a Filesystem or LUN in a Project (CLI) A filesystem or LUN created within a project inherits the properties of the project. For a list of standard properties that can be inherited, see “Inherited Properties”...
  • Page 352 = (inherited) space_data = 31K space_unused_res = 0 space_snapshots = 0 space_available = 29.4T space_total = 31K root_group = other root_permissions = 700 root_user = nobody origin = Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 353: Editing A Filesystem Or Lun (Bui)

    Editing a Filesystem or LUN (BUI) To modify the filesystem or LUN properties, use the set command. Properties are described in “Project and Share Properties” on page 363. For example, to disable the NFS protocol for the filesystem named fs-1, enter: hostname:shares default/fs-1>...
  • Page 354: Editing A Filesystem Or Lun (Cli)

    = true(inherited) secondarycache = all (inherited) shadow = none nbmand = false (inherited) sharesmb = off (inherited) sharenfs = on (inherited) snapdir = hidden (inherited) utf8only = false Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 355: Renaming A Filesystem Or Lun (Bui)

    Renaming a Filesystem or LUN (BUI) vscan = false (inherited) encryption = off (inherited) snaplabel = sharedav = off (inherited) shareftp = off (inherited) sharesftp = off (inherited) sharetftp = off (inherited) pool = pool_demo canonical_name = pool_demo/local/default/fs-1 exported = true (inherited) nodestroy = false maxblocksize = 1M (inherited) space_data = 31K...
  • Page 356: Renaming A Filesystem Or Lun (Cli)

    Enter select and the project name that contains the filesystem or LUN you want to rename. hostname:shares>select default Enter rename, the existing filesystem or LUN name, and the new filesystem or LUN name. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 357: Moving A Filesystem Or Lun To A Different Project (Bui)

    Moving a Filesystem or LUN to a Different Project (BUI) A name must consist of 1 to 64 characters, but not include spaces or begin with a period. Allowable characters are: alphanumeric and special characters _ - . : hostname:shares default> rename fs-1 fs-2 Related Topics “Filesystem Properties”...
  • Page 358: Deleting A Filesystem Or Lun (Bui)

    Deleting a filesystem or LUN destroys all data in the share and cannot be undone. Caution - Go to shares. hostname> shares Enter select and the project name that contains the filesystem or LUN. hostname:shares> select default Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 359: Setting User Or Group Quotas (Bui)

    Setting User or Group Quotas (BUI) Enter select and the filesystem or LUN name. hostname:shares default>select fs-1 Enter destroy. hostname:shares default/fs-1> destroy This will destroy all data in "fs-1"! Are you sure? (Y/N) Enter Y. hostname:shares default> Y Related Topics “Filesystem Properties”...
  • Page 360: Setting User Or Group Quotas (Cli)

    Enter select and the name= of the user. hostname:shares default/eschrock users> select name=eschrock hostname:shares default/eschrock user-002> get name = eschrock unixname = eschrock unixid = 132651 winname = (unset) winid = (unset) usage = 20.0G Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 361: About Storage Pools, Projects, And Shares

    ■ About Storage Pools, Projects, and Shares The Oracle ZFS Storage Appliance manages physical storage using a pooled storage model where all filesystems and LUNs share common space. This topic describes how storage is organized using storage pools, projects, and shares.
  • Page 362 In addition to the default properties, you can configure shares and projects with any number of additional properties. These properties are given basic types for validation purposes, and are Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 363: Project And Share Properties

    Project and Share Properties inherited like most other standard properties. The values are never consumed by the software in any way, and exist solely for end-user consumption. The property schema is global to the system, across all pools, and is synchronized between cluster peers. Related Topics “Space Management for Shares”...
  • Page 364: Inherited Properties

    The mountpoint property is the location where the filesystem is mounted. This property is only valid for filesystems. The following restrictions apply to the mountpoint property: Must be under /export ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 365 Project and Share Properties Cannot conflict with another share ■ Cannot conflict with another share on cluster peer to allow for proper failover ■ When inheriting the mountpoint property, the current dataset name is appended to the project's mountpoint setting, joined with a slash ('/'). For example, if the "home" project has the mountpoint setting /export/home, then "home/bob"...
  • Page 366: Data Deduplication

    DRAM. To determine if performance has been adversely affected by deduplication, enable advanced analytics and then use analytics to measure "ZFS DMU operations broken down by DMU Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 367: Data Compression

    Project and Share Properties object type" and check for a higher rate of sustained DDT operations (Data Duplication Table operations) as compared to ZFS operations. If this is happening, more I/O is for serving the deduplication table rather than file I/O. To use deduplication with encryption, keep in mind that only AES with the CCM mode encryption is compatible with deduplication.
  • Page 368 A common case is a database that has a separate log. The log is extremely latency sensitive, and while the database itself also requires synchronous semantics, it is heavier bandwidth and not Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 369 The synchronous write bias setting can be bypassed by the Oracle Intelligent Storage Protocol. Instead of using the write bias defined in the file system, the Oracle Intelligent Storage Protocol can use the write bias value provided by the Oracle Database NFSv4 client. The write bias value sent by the Oracle Database NFSv4 client is used only for that write request.
  • Page 370 "give away" their own files. When ownership is changed, any setuid or setgid bits are stripped, preventing users from escalating privileges through this operation. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 371: Lun Local Properties

    Project and Share Properties LUN Local Properties These properties apply only to LUNs and are not inherited. They cannot be set on projects. Volume size The volume size property is the logical size of the LUN as exported over iSCSI. This property controls the size of the LUN.
  • Page 372: Static Properties

    In the BUI, static properties can be viewed on the left side of the interface when editing a filesystem or LUN. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 373 Project and Share Properties Filesystem and LUN Static Properties TABLE 103 BUI Name CLI Name Description Creation date creation Indicates the date of creation. Compression ratio compressratio Current compression ratio for the filesystem or LUN, which is a product of the compression algorithm.
  • Page 374 "off" in pre-existing NFSv3 deployments where clients are configured to use different encodings. Enabling SMB or NFSv4 when this property is set to "off" can yield undefined Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 375 Project and Share Properties results if a NFSv3 client creates a file or directory that is not a valid UTF-8 encoding. This property must be set to "on" if the normalization property is set to anything other than "none". Normalization The normalization property controls what unicode normalization, if any, is performed on filesystems and directories.
  • Page 376: Project Properties

    Space management Sets a limit on the amount of space that can be consumed by the group. User and group users / groups Specifies users and/ or groups. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 377 Project Properties BUI Location BUI Name CLI Name Property Type Description Usage Space management Shows the amount of data used by users and/or groups. General - Inherited Mountpoint mountpoint Inherited Controls the path Properties used to export filesystems. For more information, see “Mountpoint”...
  • Page 378 For more information, “Prevent destruction” on page 370. Restrict ownership rstchown Inherited Controls the change ownership and can be turned off on Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 379 Project Properties BUI Location BUI Name CLI Name Property Type Description a per-filesystem or per-project basis. For more information, see “Restrict ownership change” on page 370. General - Custom Schema custom Can be added as Properties needed to attach user-defined tags to projects and shares.
  • Page 380 Inherited Controls how a new behavior file or directory inherits existing ACL settings from the parent directory. Snapshots - .zfs/snapshot snapdir Inherited Controls whether Properties visibility filesystem snapshots Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 381 Project Properties BUI Location BUI Name CLI Name Property Type Description can be accessed over data protocols at .zfs/ snapshot in the root of the filesystem. Scheduled snapshot snaplabel Inherited Appends a user- label defined label to each scheduled snapshot and is blank by default.
  • Page 382: Filesystem Properties

    User root-user Filesystem local Specifies the owner of the root directory. Group root_group Filesystem local Specifies the group of the root directory. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 383 Filesystem Properties BUI Location BUI Name CLI Name Property Type Description Permissions or Use root_permission Filesystem local Specifies standard Windows default UNIX permissions permissons for the root directory, or Windows default permissions. Inherit mountpoint Indicates the mountpoint is inherited if selected. Mountpoint mountpoint Inherited...
  • Page 384 (Inherit from project) used to export filesystems. For more information, see “Mountpoint” on page 364. Read only readonly Inherited Controls whether the filesystem contents are read only. For more information, Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 385 Filesystem Properties BUI Location BUI Name CLI Name Property Type Description “Read only” on page 365. Update access time atime Inherited Controls whether on read the access time for files is updated on read. For more information, “Update access time on read”...
  • Page 386 Properties (Inherit can be added as from Project) needed to attach user-defined tags to projects and shares. Protocols - NFS sharenfs Inherited NFS Protocol property settings and values are described Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 387 Filesystem Properties BUI Location BUI Name CLI Name Property Type Description “NFS Protocol Properties” on page 403. Protocols - NFS Exceptions to the overall sharing modes may be defined for clients or collections of clients. Exceptions For more information, see “NFS Share Mode Exceptions”...
  • Page 388 Snapshots - Name Specifies the name of Snapshots the snapshot. Creation Specifies the date and time when the snapshot is created. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 389 Filesystem Properties BUI Location BUI Name CLI Name Property Type Description Unique Indicates the amount of unique space used by the snapshot. Total Indicates the total amount of space referenced by the snapshot. This represents the size of the filesystem at the time the snapshot was taken, and any snapshot can...
  • Page 390: Lun Properties

    Shows the sum of referenced data, snapshot data, and unused reservation. LUN Properties In the CLI, use the get command to see a list of all properties. Note - Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 391 LUN Properties LUNs Properties TABLE 106 BUI Location BUI Name CLI Name Property Type Description Create LUN Project Defines which project the LUN uses to inherit parameter settings. Name Defines the name of the LUN. Volume size volsize LUN local Defines the maximum volume size and unit of...
  • Page 392 For more information, “Data deduplication” on page 366. Data compression compression Inherited Controls whether data is compressed before being written to disk. For Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 393 LUN Properties BUI Location BUI Name CLI Name Property Type Description more information, “Data compression” on page 367. Checksum checksum Inherited Controls the checksum used for data blocks. For more information, see “Checksum” on page 367. Additional copies Inherited Controls number replication of copies stored of each block, above...
  • Page 394 Specifies the storage pool on the target where the project will be replicated. Export data path export_path Inherited Indicates the export data path. Limit bandwidth max_bandwidth Inherited Specifies a maximum speed Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 395 LUN Properties BUI Location BUI Name CLI Name Property Type Description for this replication update (in terms of amount of data transferred over the network per second). Enable SSL- use_ssl Inherited Controls whether to encrytpion encrypt data on the wire using SSL. Disable compression compression Inherited...
  • Page 396: Space Management For Shares

    Space Management for Shares Space Management for Shares The Oracle ZFS Storage Appliance manages physical storage using a pooled storage model where all filesystems and LUNs share common space. Filesystems never have an explicit size assigned to them, and only take up as much space as they need. LUNs reserve enough physical space to write the entire contents of the device, unless they are thinly provisioned, in which case they behave like filesystems and use only the amount of space physically consumed by data.
  • Page 397: Managing Filesystem And Project Space

    Managing Filesystem and Project Space Snapshot Data - This represents the total amount of data currently held by all snapshots of ■ the share. This is the amount of space that would be free should all snapshots be destroyed. Quota - A quota represents a limit on the amount of space that can be consumed by any ■...
  • Page 398: Setting User Or Group Quotas

    Default quotas can be set at the project level and inherited by the project's filesystems. ■ Default quotas set at the project level can be changed at the filesystem level. ■ Default quotas can be retrieved or modified over the SMB protocol. ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 399: Working With Identity Management

    Working with Identity Management User and group quotas are implemented using delayed enforcement. This means that users ■ will be able to exceed their quota for a short period of time before data is written to disk. Once the data has been pushed to disk, the user will receive an error on new writes, just as with the filesystem-level quota case.
  • Page 400 "mirror mounts". With such a client, when a user traverses a mountpoint, the child filesystem is automatically mounted at the appropriate local mountpoint, and torn down when the filesystem is unmounted on the client. From the server's perspective, these are Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 401: Share Usage Statistics

    Share Usage Statistics separate mount requests, but they are stitched together onto the client to form a seamless filesystem namespace. Namespace SMB - The SMB protocol does not use mountpoints, as each share is made ■ available by resource name. However, each filesystem must still have a unique mountpoint. Nested mountpoints (multiple filesystems within one resource) are not currently supported, and any attempt to traverse a mountpoint will result in an empty directory.
  • Page 402: Share And Project Protocols

    ■ “TFTP Protocol” on page 415 ■ Related Topics “NFS Configuration” on page 237 ■ “SMB Configuration” on page 243 ■ NFS Protocol This section contains the following topics: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 403 Share and Project Protocols “NFS Protocol Properties” on page 403 ■ “NFS Share Mode Exceptions” on page 404 ■ “NFS Protocol Character Set Encodings” on page 407 ■ “NFS Protocol Security Modes” on page 408 ■ For more information about the NFS protocol, use these topics: “NFS Configuration”...
  • Page 404 TABLE 108 Client Types Type CLI Prefix Description Example Host(FQDN) or Netgroup A single client whose IP address resolves caji.sf. none to the specified fully qualified name, or a example. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 405 Share and Project Protocols Type CLI Prefix Description Example netgroup containing fully qualified names to which a client's IP address resolves. DNS Domain All clients whose IP addresses resolve to a sf.example. fully qualified name ending in this suffix. IPv4 Subnet All clients whose IP addresses are within 192.0.2.254 the specified IPv4 subnet, expressed in...
  • Page 406 153762, you might specify the following: set sharenfs="ro,anon=153762" CLI property values that contain the "=" character must be quoted. Note - Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 407 Share and Project Protocols Additional NFS exceptions can be specified by appending text of the form "option=collection", where "option" is one of ro, rw, or root, defining the type of access to be granted to the client collection. The collection is specified by the prefix character from Client Types table and either a DNS hostname/domain name or CIDR network number.
  • Page 408 Kerberos v5 integrity only - Clients must mount using this flavor. krb5:krb5i:krb5p Kerberos v5, with integrity or privacy - Clients may mount using any flavor listed. krb5p Kerberos v5 privacy only - Clients may mount using this flavor. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 409: Smb Protocol

    Share and Project Protocols Reserved Ports To set reserved ports for system authentication, use resvport as shown in this example: set sharenfs="sec=sys,rw,resvport" Note that resvport can only be used with the system authentication security mode sec=sys. SMB Protocol This section contains the following topics: “SMB Protocol Properties”...
  • Page 410 All programs accessed from the programs share are cached on the local client and available offline. When online, the programs are run from the local client. Additionally, all files accessed Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 411 Share and Project Protocols BUI value CLI value Description from the share are cached on the local client and available offline. Files are automatically reintegrated when the local client is online again. SMB Protocol Share Mode Exceptions Exceptions to the global sharing mode may be defined for clients or collections of clients by setting client-specific share modes or exceptions.
  • Page 412 SMB exceptions. The share name is the resource name, is available for <resource name>,rw sharesmb="myshare, reading and writing for all clients except those for which rw" or sharesmb=" Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 413 Share and Project Protocols BUI Share CLI Share Mode Description Example Mode Value Value the ro exception is defined. SMB exceptions may or may myshare,rw,ro=sf. not be defined. example.com" Read only The share name is the dataset name and is available for sharesmb="ro, reading only for all hosts except those for which the rw rw=sf.example.com"...
  • Page 414: Http Protocol

    For the SFTP protocol (sharesftp), users can set the share mode to determine if the filesystem is available for read only (ro), read and write (rw or on), or neither (off). Related Topics “Project Properties” on page 376 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 415: Tftp Protocol

    Access Control Lists for Filesystems “Filesystem Properties” on page 382 ■ TFTP Protocol Each share has protocol-specific properties that define the behavior of different protocols for that share. These properties can be defined for each share or inherited from a share's project. For the TFTP protocol (sharetftp), users can set the share mode to determine if the filesystem is available for read only (ro), read and write (rw or on), or neither (off).
  • Page 416: Acl Behavior On Mode Change

    ACL in different ways depending on the setting of this property. To edit the ACL behavior on mode change, see Editing a Project BUI, CLI. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 417: Acl Inheritance Behavior

    Access Control Lists for Filesystems Mode Change Values TABLE 114 BUI Value CLI Value Description Discard ACL All ACL entries that do not represent discard the mode of the directory or file are discarded. This is the default behavior. Mask ACL with mode The permissions are reduced, such mask that they are no greater than the...
  • Page 418 ACL Passthrough with Mode Preservation. For more information, “Deferred Updates” in Oracle ZFS Storage Appliance Customer Service Manual. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 419: Root Directory Acl

    Access Control Lists for Filesystems When using SMB to create a file in a directory with a trivial ACL, all ACL entries are inherited. As a result, the following behavior occurs: Inheritance bits display differently when viewed in SMB or NFS. When viewing the ACL ■...
  • Page 420 Write Write Data/Add File Permission to add a new file to a directory. When inherited by a file, Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 421 Access Control Lists for Filesystems Permission Description permission to modify a file's data anywhere in the file's offset range. This include the ability to grow the file or write to any arbitrary offset. Append Data/Add Subdirectory Permission to create a subdirectory within a directory.
  • Page 422: Working With Schemas

    Enter a description of the property ("Owner Contact"). Choose a type for the new property ("Email Address"). Click Apply. Navigate to an existing share or project. Change the "Owner Contact" property under the "Custom Properties" section. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 423: Creating A Schema (Cli)

    Creating a Schema (CLI) Creating a Schema (CLI) Go to the schema context (shares schema). Create a new property named "contact" (create contact). Set the description for the property (set description="Owner Contact"). Set the type of the property (set type=EmailAddress). Commit the changes (commit).
  • Page 424: Schema Properties

    The valid types for properties are: TABLE 121 Valid Types for Properties BUI Type CLI Type Description String String Arbitrary string data. This is the equivalent of no validation. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 425 Creating a Schema (CLI) BUI Type CLI Type Description Integer Integer A positive or negative integer Positive Integer PositiveInteger A positive integer Boolean Boolean A true/false value. In the BUI this is presented as a checkbox, while in the CLI it must be one of the values "true"...
  • Page 426 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 427: Shadow Migration

    Shadow Migration A common task for administrators is to move data from one location to another. In the most abstract sense, this problem encompasses a large number of use cases, from replicating data between servers to keeping user data on laptops in sync with servers. There are many external tools available to do this, but the appliance has two integrated solutions for migrating data that addresses the most common use cases.
  • Page 428: Understanding Shadow Migration

    X is placed into read-only mode, a share is created with the shadow property set, and clients are updated to point to the new share on the Oracle ZFS Storage Appliance. Clients can then access the appliance in read-write mode.
  • Page 429 Understanding Shadow Migration migrated, the appliance will automatically migrate this file to the local server before responding to the request. This may incur some initial latency for some client requests, but once a file has been migrated, all accesses are local to the appliance and have native performance. It is often the case that the current working set for a filesystem is much smaller than the total size, so once this working set has been migrated, regardless of the total native size on the source, there will be no perceived impact on performance.
  • Page 430: Creating A Shadow Filesystem

    The shadow migration source can only be set when a filesystem is created. In the BUI, this is available in the filesystem creation dialog. In the CLI, it is available as the shadow property. The property takes one of the following forms: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 431: Managing Background Migration

    Managing Background Migration Local - file:///<path> ■ NFS - nfs://<host>/<path> ■ The BUI also allows the alternate form <host>:/<path> for NFS mounts, which matches the syntax used in UNIX systems. The BUI also sets the protocol portion of the setting (file:// or nfs://) via the use of a pull down menu.
  • Page 432: Monitoring Migration Progress

    To cancel migration in the BUI, click the close icon next to the progress bar in the left column of the share in question. In the CLI, migrate to the shadow node beneath the filesystem and run the cancel command. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 433: Snapshotting Shadow File Systems

    Snapshotting Shadow File Systems Snapshotting Shadow File Systems Shadow filesystems can be snapshotted; however, the state of what is included in the snapshot is arbitrary. Files that have not yet been migrated will not be present, and implementation details (such as SUNWshadow extended attributes) may be visible in the snapshot. This snapshot can be used to restore individual files that have been migrated or modified since the original migration began.
  • Page 434: Migrating Local File Systems

    Once you are confident that the basic setup is functional, the filesystems can be setup for the final migration. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 435: Migrating Data From An Active Nfs Server Using The Cli

    Migrating Data from an Active NFS Server using the CLI As part of capacity planning, remember to take into account default/user group quotas Note - because the quotas could be exceeded if the source is larger than the destination. Also, shadow migration will fail if the target runs out of disk space.
  • Page 436 At this point, shadow migration should be running in the background, and client requests should be serviced as necessary. You can observe the progress as described above. Multiple filesystems can be created during a single scheduled downtime through scripting the CLI. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 437: Snapshots And Clones

    After the evaluation period, this feature must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 438 To roll back a filesystem, LUN, or project to an existing snapshot, use the following tasks: “Rolling Back to a Snapshot (BUI)” on page 457 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 439: Snapshot Space Management

    Snapshot Space Management “Rolling Back to a Snapshot (CLI)” on page 458 ■ To destroy snapshots, use the following tasks: “Destroying a Snapshot (BUI)” on page 459 ■ “Destroying a Snapshot (CLI)” on page 460 ■ Snapshot Space Management Snapshots present an interesting dilemma for space management. They represent the set of physical blocks referenced by a share at a given point in time.
  • Page 440: Taking A Snapshot (Bui)

    To take a snapshot of a filesystem, go to Shares > Shares. To take a snapshot of a LUN, go to Shares > Shares and click LUNs. To take a snapshot of a project, go to Shares > Projects. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 441: Taking A Snapshot (Cli)

    Taking a Snapshot (CLI) Hover over the share or project and click the Edit icon Click the Snapshots tab. Click the Add icon next to Snapshots. Type a name for the snapshot. Click APPLY. Taking a Snapshot (CLI) Use the following procedure to take a manual snapshot of a filesystem, LUN, or project. To schedule automatic snapshots at regular intervals, see “Scheduling Snapshots (CLI)”...
  • Page 442: Scheduling Snapshots (Bui)

    To schedule snapshots of a LUN, go to Shares > Shares and click LUNs. To schedule snapshots of a project, go to Shares > Projects. Hover over the share or project and click the Edit icon Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 443: Scheduling Snapshots (Cli)

    Scheduling Snapshots (CLI) Click the Snapshots tab. Click Schedules. Click the Add icon next to Schedules. Set each field appropriately. Set the frequency to half-hourly, hourly, daily, weekly, or monthly to indicate how often the snapshot is automatically taken. Set the precise time the snapshot is automatically taken. For half-hourly or hourly snapshots, you can choose how many minutes after the half-hour or hour the snapshot is taken.
  • Page 444 48 and 24, respectively), or they can be limited to a certain number. When the number of snapshots exceeds the number you have specified here, the oldest snapshots will be deleted first. hostname:shares myproject/demo_share snapshots automatic (uncommitted)> set frequency=day Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 445: Setting A Scheduled Snapshot Label (Bui)

    Setting a Scheduled Snapshot Label (BUI) frequency = day (uncommitted) hostname:shares myproject/demo_share snapshots automatic (uncommitted)> set hour=14 hour = 14 (uncommitted) hostname:shares myproject/demo_share snapshots automatic (uncommitted)> set minute=30 minute = 30 (uncommitted) hostname:shares myproject/demo_share snapshots automatic (uncommitted)> set keep=7 keep = 7 (uncommitted) You can use the get command to view the current uncommitted settings.
  • Page 446: Setting A Scheduled Snapshot Label (Cli)

    Go to shares and select the filesystem, LUN, or project for which you want to set the label. hostname:shares myproject> select demo_share hostname:shares myproject/demo_share> Use the set snaplabel command to create a scheduled snapshot label. hostname:shares myproject/demo_share> set snaplabel=myproject:demo_share Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 447: Viewing Snapshots And Schedules (Bui)

    Viewing Snapshots and Schedules (BUI) Viewing Snapshots and Schedules (BUI) Use the following procedure to view the snapshots and automatic snapshot schedules of a particular filesystem, LUN, or project. Go to the share or project. To view snapshots and snapshot schedules of a filesystem, go to Shares > Shares.
  • Page 448 = false space_unique = 0 space_data = 31K Enter and use the list command to view a list of the automatic automatic snapshot schedules of this share or project. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 449: Editing A Snapshot Retention Policy (Bui)

    Editing a Snapshot Retention Policy (BUI) hostname:shares myproject/demo_share snapshots> automatic hostname:shares myproject/demo_share snapshots automatic> list Properties: convert = false Automatics: NAME FREQUENCY HH:MM KEEP automatic-000 day 00:00 automatic-001 month 00:00 Editing a Snapshot Retention Policy (BUI) Use the following procedure to edit a snapshot retention policy for a filesystem, LUN, or project.
  • Page 450: Editing A Snapshot Retention Policy (Cli)

    (except for half-hourly and hourly snapshots, which are capped at 48 and 24, respectively). hostname:shares myproject/demo_share snapshots automatic-000> set keep=4 keep=4 (uncommitted) Enter commit to save the change. hostname:shares myproject/demo_share snapshots automatic-000> commit Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 451: Removing A Snapshot Schedule (Bui)

    Removing a Snapshot Schedule (BUI) Removing a Snapshot Schedule (BUI) Use the following procedure to delete an automatic snapshot schedule for a filesystem, LUN, or project. Go to the appropriate project or share. If the schedule applies to a project, go to Shares > Projects. If the schedule applies to a filesystem, go to Shares >...
  • Page 452: Making A Filesystem Snapshot Directory Visible (Bui)

    Making a Filesystem Snapshot Directory Visible (BUI) Use the following procedure to set the .zfs/snapshot directory, which is hidden by default, to appear like any other directory in a filesystem. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 453: Making A Filesystem Snapshot Directory Visible (Cli)

    Making a Filesystem Snapshot Directory Visible (CLI) The .zfs/snapshot directory contains a list of all snapshots on the filesystem. The snapshots can be accessed just like normal filesystem data, but are read-only. By default, the .zfs directory is not visible when listing directory contents. This setting prevents backup software from inadvertently backing up snapshots in addition to new data.
  • Page 454: Accessing A Hidden Filesystem Snapshot Directory (Cli)

    From here, you can list snapshots of this filesystem and look at the contents of each snapshot. Example 17 Accessing .zfs/snapshot In this example, there are two snapshots of a filesystem. The first snapshot contains three files. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 455: Accessing A Visible Filesystem Snapshot Directory (Cli)

    Accessing a Visible Filesystem Snapshot Directory (CLI) $ ls -1 /mnt/demo $ ls -1 /mnt/demo/.zfs/snapshot demo_snap1 demo_snap2 $ ls -1 /mnt/demo/.zfs/snapshot/demo_snap1 file1 file2 file3 Related Topics “Making a Filesystem Snapshot Directory Visible (BUI)” on page 452 ■ “Making a Filesystem Snapshot Directory Visible (CLI)” on page 453 ■...
  • Page 456: Renaming A Snapshot (Cli)

    To complete this procedure, you must have Super-User privileges or one of the following ■ Before You Begin role authorizations within the projects and shares scope: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 457: Rolling Back To A Snapshot (Bui)

    Rolling Back to a Snapshot (BUI) renameSnap - Allows renaming snapshots. ■ rename - Allows renaming projects and shares, including snapshot names. ■ To add authorizations to a role, see “Editing Authorizations for a Role (CLI)” on page 174. ■ Go to shares and select the project, or select the project and then a share.
  • Page 458: Rolling Back To A Snapshot (Cli)

    Enter list to view the list of snapshots for the project or share. hostname:shares myproject/demo_share snapshots> list demo_snap1 demo_snap2 Select the snapshot you want to restore, then enter the rollback command. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 459: Destroying A Snapshot (Bui)

    Destroying a Snapshot (BUI) hostname:shares myproject/demo_share snapshots> select demo_snap1 hostname:shares myproject/demo_share@demo_snap1> rollback Type to confirm. hostname:shares myproject/demo_share@demo_snap1> rollback Rolling back will revert data to snapshot, destroying newer data. Active initiators will be disconnected. Continue? (Y/N) hostname: shares myproject/demo_share@demo_snap1> Y Destroying a Snapshot (BUI) Use the following procedure to destroy a snapshot.
  • Page 460: Destroying A Snapshot (Cli)

    ■ destroy hostname:shares myproject/demo_share snapshots> destroy demo_snap1 Type to confirm your action. This will destroy all data in "demo_snap1"! Are you sure? (Y/N) Y Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 461: Cloning A Snapshot (Bui)

    After the evaluation period, this feature must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 462: Oracle Zfs Storage Appliance Administration Guide, Release Os8.6.X • September

    To make a clone of a clone, see “Cloning a Clone” on page 464. ■ To view all the clones of a particular snapshot, see “Viewing Clones of a Snapshot ■ (BUI)” on page 465. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 463: Cloning A Snapshot (Cli)

    After the evaluation period, this feature must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 464: Cloning A Clone

    After the evaluation period, this feature must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 465: Viewing Clones Of A Snapshot (Bui)

    Viewing Clones of a Snapshot (BUI) Use the following procedure to make a clone of an existing clone. Once you have created a clone from a snapshot of a filesystem or LUN, you can work with that clone as with any other share. You can take a snapshot of the clone, and you can make a clone of that snapshot.
  • Page 466: Viewing A Clone Origin (Bui)

    Go to shares and select the project that contains the clone, then select the clone. hostname:> shares select myproject hostname:shares myproject> select demo_clone hostname:shares myproject/demo_clone> Use the get origin command. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 467 Viewing a Clone Origin (CLI) The command returns the location and name of the snapshot from which the clone was made. hostname:shares myproject/demo_clone> get origin origin = myproject/demo_share@demo_snapshot Snapshots and Clones...
  • Page 468 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 469: Remote Replication

    After the evaluation period, these features must either be licensed or deactivated. Oracle reserves the right to audit for licensing compliance at any time. For details, refer to the "Oracle Software License Agreement ("SLA") and Entitlement for Hardware Systems with Integrated Software Options."...
  • Page 470: Remote Replication Workflow

    - BUI, CLI. Checking Source and Target Appliance Compatibility Remote Replication is compatible between most Oracle ZFS Storage Appliance software versions. Compatibility failures are caused if a replication update uses a feature that is not Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 471: Setting Up Network Interfaces And Static Routing (Bui)

    Features are delivered with software updates or as deferred updates. For details about compatibility and deferred update features for each software version, see the Oracle ZFS Storage Appliance Remote Replication Compatibility document (Doc ID 1958039.1) on My Oracle Support (http://support.oracle.com/).
  • Page 472 For information about using traceroute, see “Configuring Network Routing” on page When an interface is deleted, all routes associated with the interface are also removed. Note - Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 473: Setting Up Network Interfaces And Static Routing (Cli)

    Setting Up Network Interfaces and Static Routing (CLI) Related Topics “Example: Replication Configuration for Clustered Appliances” on page 535 ■ “Remote Replication Workflow” on page 470 ■ “Remote Replication Concepts” on page 526 ■ Setting Up Network Interfaces and Static Routing (CLI) To ensure the appropriate network interfaces are used for the replication connections between Before You Begin source and target appliances, configure static /32 (host-specific) routes.
  • Page 474: Creating A Replication Target (Bui)

    To create a replication target: From the BUI of the source appliance, go to Configuration > Services > Remote Replication. Next to Targets, click the add icon Enter the following: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 475: Creating A Replication Target (Cli)

    Creating a Replication Target (CLI) Name - a name of the target to display in the BUI and CLI of the source appliance. ■ Hostname - an IP address, or host name, of the target appliance. ■ Use an IP address configured with a static route to force traffic over a specific Note - network interface.
  • Page 476: Creating A Replication Action (Bui)

    From the BUI of the source appliance, go to Shares > Projects. Select the project or share, and click the Replication tab. Next to Actions, click the add icon Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 477 Creating a Replication Action (BUI) Select a target and a pool. Select properties for this action. “Replication Action Properties” on page 547 for a description of all properties. Select Scheduled, and set a frequency of the replication update, or select Continuous to send replication updates continuously.
  • Page 478: Creating A Replication Action (Cli)

    PROJECT1/SHARE1 replication> action Display the properties. host_source:shares PROJECT1/SHARE1 action (uncommitted)> get Properties: target = (unset) pool = (unset) enabled = true continuous = false include_snaps = true max_bandwidth = unlimited Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 479 Creating a Replication Action (CLI) use_ssl = true Set the properties for this action. “Replication Action Properties” on page 547 for a description of CLI properties. host_source:shares PROJECT1/SHARE1 action (uncommitted)> set target=repl_sys target = repl_sys (uncommitted) host_source:shares PROJECT1/SHARE1 action (uncommitted)> set pool=pool-0 pool = pool-0 (uncommitted) host_source:shares PROJECT1/SHARE1 action (uncommitted)>...
  • Page 480: Configuring Replication For A Clustered Configuration

    This maintains the association when the replication configuration is performed while the target cluster is in the CLUSTERED state. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 481: Manually Sending A Replication Update (Bui)

    Manually Sending a Replication Update (BUI) Ensure that the source and the target systems can communicate using the selected network interfaces and IP addresses. On the source and target appliances, create static /32 (host-based) network routes using the selected network interfaces and IP addresses. On the source appliance, configure the replication target object using the selected IP address of the target.
  • Page 482: Creating An Offline Replication (Bui)

    Set the file permissions to expose the NFS share only to the IP address of the source and target appliances. To encrypt the replication stream, enable on-disk encryption for the NFS share on the NFS server. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 483: Setting Up An Export Path To The Nfs Server (Bui)

    Setting Up an Export Path to the NFS Server (BUI) An exported replication stream is never encrypted by the appliance. Note - Export the share for access by the NFS client. Verify that the filesystem is shared. Next Steps “Setting Up an Export Path to the NFS Server (BUI)” on page 483 ■...
  • Page 484: Verifying The Replication Stream On The Nfs Server

    Physically move the NFS server to the target appliance site, or copy the rr_updates folder to external media and prepare for shipping. Next Steps “Importing the Replication Stream from the NFS Server (BUI)” on page 485 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 485: Importing The Replication Stream From The Nfs Server (Bui)

    Importing the Replication Stream from the NFS Server (BUI) Importing the Replication Stream from the NFS Server (BUI) Go to Shares > Projects > Replicas. Select the replica that shows source: awaiting import. Click the Replication tab. In the Import Data Path field, enter the path of the replica. Click the Import update from external media icon to start the import.
  • Page 486: Creating An Offline Replication (Cli)

    “Importing a Replication Stream from the NFS Server (CLI)” on page 491 ■ “Performing a Manual Network Update (CLI)” on page 493 ■ “Reversing Replication for Offline Replication (CLI)” on page 494 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 487: Setting Up An Nfs Server For Offline Replication

    Setting Up an NFS Server for Offline Replication Setting Up an NFS Server for Offline Replication The steps for setting up an NFS server will vary depending on the NFS server type you use. Refer to your NFS server documentation for specific instructions. Identify a server that is network ready and has NFS Services enabled.
  • Page 488: Current Status

    = true offline = false next_update = Export replication data last_sync = <unknown> last_try = <unknown> last_result = <unknown> Next Steps “Exporting a Replication Update (CLI)” on page 489 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 489: Exporting A Replication Update (Cli)

    Exporting a Replication Update (CLI) Exporting a Replication Update (CLI) To export the replication update to the NFS server, use the sendupdate command. source:shares default action-000>sendupdate Enter ls to view the status, as shown in this example: source:shares default action-000> ls Properties: id = 96366bf2-0b3c-4eec-e85b-e36e1b5bc18c target = target_a...
  • Page 490: Verifying A Replication Stream On The Nfs Server

    <!DOCTYPE nvlist SYSTEM "/usr/share/lib/xml/dtd/nvlist.dtd.1"> <nvlist> <nvpair name='offline_rr_version'><string value='1.1'/></nvpair> <nvpair name='source_asn'><string value='2ea4670f-bc17-cf8f-a420-9211d6edda04'/></ nvpair> <nvpair name='project'><string value='default'/></nvpair> <nvpair name='pkgid'><string value='96366bf2-0b3c-4eec-e85b-e36e1b5bc18c'/></nvpair> <nvpair name='basesnap'><string value=/></nvpair> <nvpair name='newsnap'><string value='.rr-96366bf2-0b3c-4eec-e85b-e36e1b5bc18c-1'/></ nvpair> <nvpair name='compression'><string value='on'/></nvpair> </nvlist> Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 491: Importing A Replication Stream From The Nfs Server (Cli)

    Importing a Replication Stream from the NFS Server (CLI) nfs_server# Physically move the NFS server to the target appliance site, or copy the rr_updates folder to external media and prepare for shipping. Next Steps “Importing a Replication Stream from the NFS Server (CLI)” on page 491 ■...
  • Page 492 After the replication stream is imported to the target appliance, proceed with one of the following: “Performing a Manual Network Update (CLI)” on page 493 ■ “Reversing Replication for Offline Replication (CLI)” on page 494 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 493: Performing A Manual Network Update (Cli)

    Performing a Manual Network Update (CLI) Performing a Manual Network Update (CLI) After importing the offline replication stream to the target appliance, confirm future network updates will work correctly. If continuous or scheduled replication is already configured, the update will be performed automatically. Otherwise, perform a manual update as shown in the following example.
  • Page 494: Reversing Replication For Offline Replication (Cli)

    Import the offline replication stream from an NFS server to the target appliance, as described in Before You Begin “Importing a Replication Stream from the NFS Server (CLI)” on page 491. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 495 Reversing Replication for Offline Replication (CLI) From the target appliance, navigate to the replicated package and locate the project: target:configuration services replication source-000 package-000> ls Properties: id = 1c0457eb-45bd-4f91-8e08-bc0dbacd40b7 enabled = true state = idle state_description = Idle (no update in progress) offline = false import_path = last_sync = Fri Jul 31 2015 21:59:19 GMT+0000 (UTC)
  • Page 496 = Idle (no update in progress) export_pending = false offline = true next_update = Sync now last_sync = <unknown> last_try = Fri Jul 31 2015 22:17:33 GMT+0000 (UTC) last_result = success Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 497 Reversing Replication for Offline Replication (CLI) After the replication update is complete, navigate to the newly reversed package on the new target. The state description should be Idle (awaiting import), as shown in the example: new_target:configuration services replication sources> ls Sources: source-000 <unknown>...
  • Page 498: Monitoring Replication Progress (Bui)

    To monitor the progress of a replication update, navigate to the project or share. Determine the progress by reviewing the bytes_sent, estimate_size, estimated_time_left, and average_throughput properties. brmzs3-2-460:shares 460-non-encrypt action-000> ls Properties: id = 96329c98-6a97-4fd4-810e-be9529ce4dcf target = brmzs3-2-250 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 499: Replication Alerts And Audit Events

    Replication Alerts and Audit Events enabled = true continuous = false include_snaps = true max_bandwidth = unlimited bytes_sent = 1.93T estimated_size = 2.5T estimated_time_left = 03:11:11 average_throughput = 50MB/s use_ssl = true compression = on export_path = state = sending state_description = Sending update export_pending = false offline = false...
  • Page 500: Using Replication Analytics

    Click Apply to save the changes. Related Topics “Remote Replication Concepts” on page 526 ■ “Remote Replication Workflow” on page 470 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 501: Editing A Replication Target (Cli)

    Editing a Replication Target (CLI) Editing a Replication Target (CLI) Navigate to the targets node to set or unset the target hostname, root_password, and label. knife:> configuration services replication targets From this context, you can: Add new targets. ■ View the actions configured with the existing target. ■...
  • Page 502: Editing A Replication Action (Cli)

    You can disable compression when you create or edit a replication action. By default, all replication streams are compressed before being sent over the network. From the source appliance, go to Shares > Projects > and double-click the project you want to edit. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 503: Disabling Replication Compression (Cli)

    Disabling Replication Compression (CLI) Click the Replication tab. Click the edit icon Click Disable compression, and click Apply. Related Topics “Compressed Replication” on page 549 ■ “Remote Replication Workflow” on page 470 ■ Disabling Replication Compression (CLI) You can disable compression when you create or edit a replication action. By default, all replication streams are compressed before being sent over the network.
  • Page 504: Canceling A Replication Update (Bui)

    A manual update cannot be initiated from the target appliance. You must log into the Note - source appliance to initiate a manual update. Related Topics “Replication Packages” on page 550 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 505: Canceling A Replication Update (Cli)

    Canceling a Replication Update (CLI) “Manually Sending a Replication Update (BUI)” on page 481 ■ Canceling a Replication Update (CLI) You can cancel in-progess replication updates on the target. Replication packages are organized in the CLI by source under shares replication sources. From the target appliance, navigate to the replication package.
  • Page 506 (Optional) SMB Resource Name Prefix - Enter an SMB resource name. This setting applies to shares that inherit the SMB resource name from the project. Entering a unique resource name helps avoid conflicts. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 507 Cloning a Replication Package (BUI) When SMB is enabled, you can share the clone over SMB. The SMB Resource Name Prefix used to share inherited shares of the new cloned project will be constructed using the prefix you add plus the name of the corresponding share. Click APPLY.
  • Page 508 Enter a unique suffix to append to the mountpoint and/or SMB resource names of these shares. Click APPLY. If conflicts still exist, repeat step 6 to resolve the appropriate conflicts. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 509: Cloning A Replication Package (Cli)

    Cloning a Replication Package (CLI) Related Topics “Cloning a Replication Package or Share” on page 551 ■ “Replication Packages” on page 550 ■ Cloning a Replication Package (CLI) A clone of a replication package is based on the most recently received replication snapshot. When creating a cloned project, avoid naming conflicts by following these guidelines: The cloned project must have a unique name that does not conflict with any of the existing ■...
  • Page 510 (Optional) Set project-level properties to resolve conflicts for shares that inherit properties from a project. Use the get command to view the properties of the clone. hostname:shares replication source-000 package-004 clone> get target_project = clone rename_suffix = Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 511 Cloning a Replication Package (CLI) original_mountpoint = /export mountpoint = /export original_smb_resource_name = share smb_resource_name = share The property mountpoint shows the current mountpoint. The property smb_resource_name shows the current resource name. Enter a unique project-level mountpoint for the clone. This setting applies to shares that inherit a mountpoint from a project.
  • Page 512: Editing A Replication Package (Bui)

    “Cloning a Replication Package or Share” on page 551 ■ “Remote Replication Workflow” on page 470 ■ Editing a Replication Package (BUI) From the target appliance, go to Shares > Projects, and click Replica. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 513: Editing A Replication Package (Cli)

    Editing a Replication Package (CLI) The name, size, and creation date of each replication package is displayed. Packages are displayed in the BUI only after the first replication update has begun. They Note - may not appear in the list until some time after the first update has completed. Select a replication package for editing.
  • Page 514 To display replication sources from configuration services replication, use the show property: loader:configuration services replication> show Properties: <status> = online Children: targets => Configure replication targets sources => View and manage replication packages Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 515: Disabling A Replication Package (Bui)

    Disabling a Replication Package (BUI) Related Topics “Replication Packages” on page 550 ■ “Remote Replication” on page 469 ■ Disabling a Replication Package (BUI) Replication updates for a package can be disabled entirely, which will cancel any ongoing updates and cause new updates from the source appliance to fail. From the target appliance, navigate to the package.
  • Page 516: Severing A Replication Package (Bui)

    Enter a name for the new local project as an argument to the sever command. If no argument is specified, the original name is used. Related Topics “Severing Replication” on page 553 ■ “Remote Replication” on page 469 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 517: Setting Up Remote Replication For Disaster Recovery (Bui)

    Setting Up Remote Replication for Disaster Recovery (BUI) Setting Up Remote Replication for Disaster Recovery (BUI) A two-system disaster recovery site consists of a source appliance at a production site and a target appliance located at a recovery site in a geographically different location. In the event of a catastrophic production site failure, the administrator redirects client operations to the recovery site by reversing replication on the target appliance, thus ensuring continuous operation.
  • Page 518: Switching Operations To The Recovery Site (Bui)

    Updating the Production Site (BUI) After the production site is restored and back online, replicate the changes written to the recovery site during the outage back to the production site. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 519: Reversing Replication Back To The Production Site (Bui)

    Reversing Replication Back to the Production Site (BUI) From the appliance at the recovery site, go to Shares > Projects > Local and select the new local project. The new project is listed with status Never synced. Click Sync Now to start the replication. Wait for the replication to complete.
  • Page 520: Setting Up Remote Replication For Disaster Recovery (Cli)

    To create a replication target for disaster recovery: Identify a target appliance at the recovery site. The target appliance requires a software version compatible with the source appliance. See MOS Doc ID 1958039.1 for details. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 521: Switching Operations To The Recovery Site (Cli)

    Switching Operations to the Recovery Site (CLI) From the source appliance, create a target as described in “Creating a Replication Target (CLI)” on page 475. Create a replication action and schedule a continuous replication. See “Creating a Replication Action (CLI)” on page 478.
  • Page 522: Updating The Production Site (Cli)

    Filesystems: NAME SIZE ENCRYPTED MOUNTPOINT karen2 /export/karen2 host:shares pool new-kmm2> replication host:shares pool new-kmm2 replication> show Actions: TARGET STATUS NEXT action-000 host2 idle Sync now Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 523: Reversing Replication Back To The Production Site (Cli)

    Reversing Replication Back to the Production Site (CLI) Select the action number and then enter sendupdate to start replication to the production appliance. host-offsite:shares pool new-kmm2 replication> select action-000 host-offsite:shares pool new-kmm2 action-000> sendupdate Wait for the replication to complete. The state changes to idle when the replication has completed.
  • Page 524 << This is the name of the offsite disaster recovery system PROJECT STATE LAST UPDATE package-000 new-kmm2 idle Wed May 01 2015 20:44:34 GMT+0000 (UTC) Select the source number and the package number, as shown in the following example: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 525: Using Replication For Disk-To-Disk Backup

    Using Replication for Disk-to-Disk Backup host-prod:shares replication sources> select source-005 host-prod:shares replication source-005> select package-000 Enter reverse and the project name. Then enter Y to confirm the action. host-prod:shares replication source-005 package-000> reverse kmm2 Are you sure? (Y/N) Y This action converts the package to a new local project, configured to replicate back to the original recovery site.
  • Page 526: Remote Replication Concepts

    ■ Remote Replication Concepts Oracle ZFS Storage Appliance Remote Replication is a licensed feature that provides snapshot- based replication of projects and shares from a source appliance to one or more target Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 527 Secure Sockets Layer (SSL). Data can optionally be protected with SSL as well. The Oracle ZFS Storage Appliance can only replicate to or from another Oracle ZFS Storage Appliance after an initial manual authentication process. For more information, see “Replication Targets”...
  • Page 528 “Replication Snapshots and Data Consistency” on page 542 ■ “Replication Snapshot Management” on page 543 ■ “iSCSI Configurations and Replication” on page 544 ■ “Replication Failures” on page 545 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 529: Replication Targets

    Remote Replication Concepts “Replication Action Properties” on page 547 ■ “Compressed Replication” on page 549 ■ “Replication Packages” on page 550 ■ “Cloning a Replication Package or Share” on page 551 ■ “Exporting Replicated Filesystems” on page 552 ■ “Severing Replication” on page 553 ■...
  • Page 530: Replication Actions And Packages

    However, as long as replication can keep up with the data changes, this results in the minimum amount of data lost in the event of a data-loss disaster on the source system. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 531: Replication Storage Pools

    Remote Replication Concepts Continuous replication is still asynchronous. The Oracle ZFS Storage Appliance does not currently support synchronous replication, which does not consider data committed to stable storage until it is fully committed on both the primary and secondary storage systems.
  • Page 532: Project Vs. Share Replication

    More precisely, the replication configuration of a project and its shares define some number of replication groups, each of which is replicated with a single stream using snapshots taken simultaneously. All groups contain the project itself (which essentially just includes its Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 533: Replication Authorizations

    Remote Replication Concepts properties). One project-level group includes all shares inheriting the replication configuration of the parent project. Any share that overrides the project's configuration forms a new group consisting of only the project and the share itself. For example, suppose you have: A project home and shares bill, cindi, and dave.
  • Page 534: Replication Configuration For Clustered Appliances

    IP address (as part of a takeover or failback) will fail. Replication updates using storage pools and IP addresses unaffected by a takeover or failback operation will be unaffected by the operation. Related Topics Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 535: Example: Replication Configuration For Clustered Appliances

    Remote Replication Concepts “Example: Replication Configuration for Clustered Appliances” on page 535 ■ Example: Replication Configuration for Clustered Appliances The goal of this example is to configure replication properly to ensure that projects continue to replicate after a cluster takeover, cluster failback, or after performing reverse replication on a target appliance.
  • Page 536: Oracle Zfs Storage Appliance Administration Guide, Release Os8.6.X • September

    Singleton interface ixgbe1 with IP address 192.0.2.103/25 assigned to T1 ■ Singleton interface ixgbe2 with IP address 192.0.2.104/25 assigned to T2 ■ Singleton interface ixgbe3 with IP address 192.0.2.203/25 assigned to T1 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 537 Remote Replication Concepts Singleton interface ixgbe4 with IP address 192.0.2.204/25 assigned to T2 ■ The appliance is initially in the CLUSTERED state where: T1 owns tp1, ixgbe1, ixgbe3 ■ T2 owns tp2, ixgbe2 and ixgbe4 ■ The following steps describe how to configure replication using the CLI for projects Red, Blue, and Green.
  • Page 538 The following example creates the replication action for project Red: S1:> shares select Red replication action S1:shares Red action (uncommitted)> set target=t1-1 target=t1-1 (uncommitted) S1:shares Red action (uncommitted)> set pool=tp1 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 539 Remote Replication Concepts pool=tp1 (uncommitted) S1:shares Red action (uncommitted)> commit 6. Set up to replicate project Blue from pool sp1 to tp2. Start with interface and address selection, and select interfaces S1/ixgbe3 and T2/ixgbe4, knowing that both S and T are in the CLUSTERED state and that the interface addresses are on the same subnet, 192.0.2.128/25.
  • Page 540 After controller T1 has completed the takeover, it owns interfaces ixgbe2 and ixgbe4 which are necessary to continue replication updates for projects Blue and Green. The following figure shows the replication data path after T1 completed the takeover. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 541 Remote Replication Concepts Replication Data Path After T1 Takeover FIGURE 32 After T2 is back online, a failback is performed on the T1 controller and it takes over its resources. If replication updates of projects Blue and Green are in progress, they will be canceled and can be resumed following the completion of the failback.
  • Page 542: Replication Snapshots And Data Consistency

    Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 543: Replication Snapshot Management

    Remote Replication Concepts However, each share's snapshots are replicated separately, so it is possible for some shares within a package to have been updated with a snapshot that is more recent than those of other shares in the same package. This is true during a replication update and after a failed replication update.
  • Page 544: Iscsi Configurations And Replication

    The SCSI GUID associated with a LUN is replicated with the LUN. As a result, the LUN on the target appliance will have the same SCSI GUID as the LUN on the source appliance. Clones Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 545: Replication Failures

    Remote Replication Concepts of replicated LUNs, however, will have different GUIDs (just as clones of local LUNs have different GUIDs than their origins). Related Topics “Remote Replication Workflow” on page 470 ■ “Remote Replication” on page 469 ■ Replication Failures Individual replication updates can fail for a number of reasons.
  • Page 546 Replication clone, sever, or reverse operation failed because the initiator group or target group LUNs do not exist for the LUNs included in the replication package. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 547: Replication Action Properties

    When a replication update is in progress and another update is scheduled, the scheduled replication is deferred until the previous update completes, and an alert is posted. Related Topics How to Troubleshoot Replication Issues (Doc ID 1397959.1) on My Oracle Support (http: ■ //support.oracle.com/) Replication Action Properties Replication actions have the following properties.
  • Page 548 Packages” on page 530. Schedule schedule Select the frequency and details for every half hour, hour, day, week, or frequency month. The following table describes the CLI read-only replication action properties. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 549: Compressed Replication

    Remote Replication Concepts Replication Action Properties (CLI Read-only) TABLE 123 CLI Property Description Bytes sent Read-only property describing the number of bytes sent to the target. Estimated size Read-only property describing the estimated size of the data to be replicated. Estimated time left Read-only property describing the estimated time remaining until completion.
  • Page 550: Replication Packages

    Automatic snapshots are not taken or destroyed on replicated projects and shares. Such property modifications persist across replication updates. FIGURE 34 Managing Replication Package Properties Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 551: Cloning A Replication Package Or Share

    Remote Replication Concepts Related Topics “Project and Share Properties” on page 363 ■ “Severing Replication” on page 553 ■ Cloning a Replication Package or Share A clone of a replicated package is a local, mutable project that can be managed like any other project on the system.
  • Page 552: Exporting Replicated Filesystems

    This may be newer than the most recently received snapshot for the entire package, and it may not match the most recent snapshot for other shares in the same package. For details, “Replication Snapshots and Data Consistency” on page 542. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 553: Severing Replication

    Remote Replication Concepts Replication updates are applied atomically at the filesystem level. Clients looking at replicated files will see replication updates as an instantaneous change in the underlying filesystem. Clients working with files deleted in the most recent update will see errors. Clients working with files changed in the most recent update will immediately see the updated contents.
  • Page 554: How Reverse Replication Works

    The following figure describes a typical reverse replication sequence of events. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 555 Remote Replication Concepts FIGURE 36 Using Remote Replication for Disaster Recovery Legend Description The production system is the source appliance serving the client workload and replicating to the target appliance located at a recovery site. A complete failure of the source appliance occurs at the production site. Remote Replication...
  • Page 556 “Setting Up Remote Replication for Disaster Recovery (BUI)” on page 517 ■ “Setting Up Remote Replication for Disaster Recovery (CLI)” on page 520 ■ Using Remote Replication for Disk-to-Disk Backup ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 557: Destroying A Replication Package

    Remote Replication Concepts Destroying a Replication Package The project and shares within a package cannot be destroyed without destroying the entire package. The entire package can be destroyed from the BUI by destroying the corresponding project. A package can be destroyed from the CLI using the destroy command at the shares replication sources node.
  • Page 558 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 559: Data Encryption

    Encryption is only available to license on the Oracle ZFS Storage ZS5-4, Oracle ZFS Storage ZS5-2, Oracle ZFS Storage ZS4-4, and Oracle ZFS Storage ZS3-4. After the evaluation period, this feature must either be licensed or deactivated.
  • Page 560: Data Encryption Workflow

    To configure encryption using the LOCAL keystore, first set up the master passphrase and then create keys for assigning to encrypted shares. For information about encryption properties, see “Encryption Properties” on page 581. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 561 Configuring LOCAL Keystore Encryption (BUI) To create a key, you provide the name to be used for assigning the key to projects or shares. You can choose to let the system generate the key value or you can supply a hex-encoded raw 256- bit key.
  • Page 562 “Configuring LOCAL Keystore Encryption (CLI)” on page 563 ■ “Configuring OKM Keystore Encryption (BUI)” on page 564 ■ “Creating a Filesystem or LUN in a Project (BUI)” on page 350 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 563: Configuring Local Keystore Encryption (Cli)

    Configuring LOCAL Keystore Encryption (CLI) Configuring LOCAL Keystore Encryption (CLI) This procedure assumes that encryption was not previously set up on the appliance. For information about encryption properties, see “Encryption Properties” on page 581. To set up the master passphrase, use the following CLI commands: hostname:>...
  • Page 564: Configuring Okm Keystore Encryption (Bui)

    “Creating an Encrypted Project (CLI)” on page 567 ■ Configuring OKM Keystore Encryption (BUI) To configure encryption using the Oracle Key Manager (OKM), first set up the Key Manager Server information, and then create keys for assigning to encrypted shares. For information about encryption properties, see “Encryption Properties”...
  • Page 565: Configuring Okm Keystore Encryption (Cli)

    ■ “Creating a Filesystem or LUN in a Project (BUI)” on page 350 ■ Configuring OKM Keystore Encryption (CLI) To use the Oracle Key Manager (OKM) keystore, configure the following parameters: agent_id ■ registration_pin (supplied by your OKM security officer) ■...
  • Page 566: Creating An Encrypted Project (Bui)

    “Data Encryption” on page 559. Before You Begin Navigate to Shares > Projects. Click the Add icon Name the project. Set an encryption key length. Choose LOCAL or OKM for the keystore. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 567: Creating An Encrypted Project (Cli)

    Creating an Encrypted Project (CLI) Select a keyname. Save the project. Related Topics “Encryption Properties” on page 581 ■ “Managing Encryption Keys” on page 582 ■ “Changing a Project Encryption Key (BUI)” on page 568 ■ Creating an Encrypted Project (CLI) Shares (filesystems and LUNs) can be encrypted individually or they can be encrypted at the project level because shares inherit project properties.
  • Page 568: Changing A Project Encryption Key (Bui)

    To find the share you want, click Show All, Local, or Replica. Move your cursor over the project you want to change, and click the Edit icon Click General. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 569 Changing a Project Encryption Key (BUI) The project parameters are displayed. To change the project encryption key, select Local or OKM and select the key you want to use. To save the changes, click Apply or to discard your changes click Revert. When you click Apply, your changes are saved and the new key appears in the Encryption key area.
  • Page 570: Changing A Project Encryption Key (Cli)

    To use encryption, you must first configure a keystore and keys; see “Data Before You Begin Encryption” on page 559. Go to Shares > Shares. Select Filesystems or LUNs. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 571: Creating An Encrypted Filesystem Or Lun (Cli)

    Creating an Encrypted Filesystem or LUN (CLI) Click the add icon Complete the fields in the Create Filesystem or Create LUN dialog box. For a filesystem, select a project and enter a name. ■ For a LUN, select a project, enter a name and specify the volume size. ■...
  • Page 572: Changing A Share Encryption Key (Bui)

    To change a key for a share without changing the parent project, use the following procedure: To display the properties for the share you want to change, go to Shares > Shares. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 573 Changing a Share Encryption Key (BUI) Select Filesystems or LUNs. To find the share you want, click Show All, Local, or Replica. Move your cursor over the share you want to change, and click the Edit icon The share properties are displayed. If necessary, uncheck Inherit from project.
  • Page 574: Changing A Share Encryption Key (Cli)

    Backing Up a LOCAL Key (BUI) Use the following procedure to retrieve the information for a single LOCAL key in order to back it up. Navigate to Shares > Encryption > Local. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 575: Backing Up A Local Key (Cli)

    Backing Up a LOCAL Key (CLI) Click on the key you want to back up. A dialog box appears with the keyname and key value. Using any method, record this information in a backup location of your choosing and then click OK. Backing Up a LOCAL Key (CLI) Use the following procedure to retrieve the information for a single LOCAL key in order to back it up.
  • Page 576 Use the following procedure to delete a LOCAL or OKM encryption key. Navigate to Shares > Encryption. Select Local or OKM. Move your cursor over the key that you want to delete and click the Delete icon Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 577 Deleting an Encryption Key (BUI) The following alert is displayed: To delete the key, click OK, or to keep the key, click Cancel. When a key is deleted, all of the data in all of the shares that use the key becomes inaccessible. This is equivalent to secure data destruction and is permanent and irrevocable, unless you have prepared for key restoration by backing up the key.
  • Page 578: Deleting An Encryption Key (Cli)

    = aes-128-ccm (inherited) keystore = LOCAL (inherited) keyname = AKTEST_K1 (inherited) keystatus = unavailable Errors: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 579: Restoring A Local Key (Bui)

    574. Although deleting a LOCAL key renders shares inaccessible, the shares can be made accessible again by recreating the LOCAL key. For information about restoring keys stored in the OKM keystore, refer to the Oracle Key Manager documention on the Oracle Technology Network (http://www.oracle.com/...
  • Page 580: Restoring A Local Key (Cli)

    575. Although deleting a LOCAL key renders shares inaccessible, the shares can be made accessible again by recreating the LOCAL key. For information about restoring keys stored in the OKM keystore, refer to the Oracle Key Manager documention on the Oracle Technology Network (http://www.oracle.com/...
  • Page 581: Encryption Properties

    Key - Hex-encoded raw 256-bit key, stored in an encrypted form, if automatic key ■ generation is not selected. OKM Key Management Properties (supplied by your OKM administrator) ■ Key Manager Server - IP address of your Oracle Key Manager (OKM) server. ■ Data Encryption...
  • Page 582: Managing Encryption Keys

    ■ Managing Encryption Keys The appliance includes a built-in LOCAL keystore and the ability to connect to the Oracle Key Manager (OKM) system. Each encrypted project or share requires a wrapping key from either the LOCAL or OKM keystores. The data encryption keys are managed by the storage appliance and are stored persistently encrypted by the wrapping key from the LOCAL or OKM keystore.
  • Page 583: Maintaining Keys

    Managing Encryption Keys Interoperability - OKM provides the interoperability needed to support a diverse range ■ of storage devices attached to mainframe or open systems under a single storage key management service. High availability - With active N-node clustering, dynamic load balancing, and automated ■...
  • Page 584: Performance Impact Of Encryption

    LUN volume block size is larger than the application block size. Related Topics “Data Encryption Workflow” on page 560 ■ “Encryption Properties” on page 581 ■ “Managing Encryption Keys” on page 582 ■ Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 585: Encryption Key Life Cycle

    Encryption Key Life Cycle “Encryption Key Life Cycle” on page 585 ■ Encryption Key Life Cycle The encryption key life cycle is flexible because you can change keys at any time without taking data services offline. When a key is deleted from the keystore, all the shares that use it are unmounted and their data becomes inaccessible.
  • Page 586: Replicating An Encrypted Share

    “Encryption Key Life Cycle” on page 585 ■ “Backing up and Restoring Encrypted Data” on page 585 ■ Oracle ZFS Storage Appliance: Remote Replication Compatibility [Doc ID 1958039.1] ■ MOS note Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 587: Maintenance Workflows

    Maintenance Workflows A workflow is a CLI script that is uploaded to and managed by the appliance by itself. Workflows can be parameterized and executed in a first-class fashion from either the browser interface or the command line interface. Workflows may also be optionally executed as alert or at a designated time.
  • Page 588: Understanding Workflows

    'Displays the current CPU utilization', execute: function () { run('analytics datasets select name=cpu.utilization'); cpu = run('csv 1').split('\n')[1].split(','); return ('At ' + cpu[0] + ', utilization is ' + cpu[1] + '%'); Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 589: Understanding Workflow Parameters

    Understanding Workflow Parameters Understanding Workflow Parameters Workflows that do not operate on input have limited scope; many workflows need to be parameterized to be useful. This is done by adding a parameters member to the global workflow object. The parameters member is in turn an object that is expected to have a member for each parameter.
  • Page 590: Constrained Workflow Parameters

    Description Array An array of strings that specifies the options valid options Array An array of strings that specifies the optionlabels labels associated with the options specified in options Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 591: Optional Workflow Parameters

    Optional Workflow Parameters Using the Workflow ChooseOne Parameter EXAMPLE 21 Using the ChooseOne parameter type, we can enhance the previous example to limit the business unit to be one of a small number of predefined values: var workflow = { name: 'Create share', description: 'Creates a new share in a business unit', parameters: {...
  • Page 592: Workflow Error Handling

    [ 'Development', 'Finance', 'Quality Assurance', 'Sales/Administrative' ], execute: function (params) { try { run('shares select ' + params.unit); } catch (err) { if (err.code != EAKSH_ENTITY_BADSELECT) throw (err); Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 593: Workflow Input Validation

    Workflow Input Validation * We haven't yet created a project that corresponds to * this business unit; create it now. run('shares project ' + params.unit); run('commit'); run('shares select ' + params.unit); run('filesystem ' + params.name); run('commit'); return ('Created new share "' + params.name + '"'); Workflow Input Validation Workflows may optionally validate their input by adding a validate member that takes as a parameter an object that contains the workflow parameters as members.
  • Page 594: Workflow Execution Auditing And Reporting

    To allow the execution of a workflow to be reported in this way, the execute member should return an array of steps. Each array element must contain the following members: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 595 Workflow Execution Auditing and Reporting Required Members for Execution Reporting TABLE 130 Required Member Type Description String String that denotes the name of the step execution step Function Function that executes the step of the execute workflow As with the execute function on the workflow as a whole, the execute member of each step takes as its argument an object that contains the parameters to the workflow.
  • Page 596 'email controller state', description: 'email controller state', execute: function () { // verify state of the controller var faulted = run('maintenance hardware "chassis-000" get faulted'); var messageBody = faulted; Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 597: Understanding Workflow Versioning

    Understanding Workflow Versioning emailAddress = 'first.last@xyz.com'; subjectLine = 'Controller State'; mail({To: emailAddress, Subject: subjectLine}, messageBody); Understanding Workflow Versioning There are two aspects of versioning with respect to workflows: the first is the expression of the version of the appliance software that the workflow depends on, and the second is the expression of the version of the workflow itself.
  • Page 598: Using Workflows For Alert Actions

    String The action that should be taken by action the user in response to the alert. String The impact of the event that impact precipitated the alert. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 599 Using Workflows for Alert Actions Required Member Type Description String A human-readable string describing description the alert. String The severity of the event that severity precipitated the alert. Workflows executing as alert actions may use the audit function to generate audit log entries. It is recommended that any relevant debugging information be generated to the audit log via the audit function.
  • Page 600: Using Scheduled Workflows

    00-23, Specifies the hour part of the hour schedule and can be specified when the frequency is set to a day,week or month. String 00-59, Specifies the minute part of minute the schedule. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 601: Using A Scheduled Workflow

    Using a Scheduled Workflow Using a Scheduled Workflow Once a workflow has been loaded into the appliance a schedule can be defined for it via the CLI interface as follows: EXAMPLE 28 Scheduled Workflow in the CLI dory:> maintenance workflows dory:maintenance workflows>...
  • Page 602 They can be set to either seconds or month. The property period specifies the frequency of the event and the offset specifies the units within the period. In the above example Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 603: Creating A Worksheet Based On A Specified Drive Type

    WORKFLOW NAME OWNER SETID ORIGIN VERSION workflow-000 Configure for Oracle Solaris Cluster NFS root false Oracle Corporation 1.0.0 workflow-001 Unconfigure Oracle Solaris Cluster NFS root false Oracle Corporation 1.0.0 workflow-002 Configure for Oracle Enterprise Manager Monitoring root false Sun Microsystems, Inc.
  • Page 604 * each chassis iterates over all disks in the chassis, * looking for disks that match the specified type. var chassis, name, disks; var i, j; run('cd /'); run('maintenance hardware'); Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 605 Creating a Worksheet Based on a Specified Drive Type chassis = list(); params.disks = []; for (i = 0; i < chassis.length; i++) { run('select ' + chassis[i]); name = get('name'); run('select disk'); disks = list(); for (j = 0; j < disks.length; j++) { run('select ' + disks[j]);...
  • Page 606: Uploading Workflows Using The Bui

    Uploading Workflows using the BUI Workflows are uploaded to the appliance by clicking on the plus icon, and they are executed by clicking on the row specifying the workflow. Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 607: Downloading Workflows Using The Cli

    Downloading Workflows using the CLI Workflows seen on the BUI FIGURE 37 Downloading Workflows using the CLI Workflows are downloaded to the appliance via the download command, which is similar to the mechanism used for software updates: dory:maintenance workflows> download dory:maintenance workflows download (uncommitted)>...
  • Page 608: Listing Workflows Using The Cli

    = Hello world description = Bids a greeting to the world owner = root origin = <local> setid = false alert = false scheduled = false Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 609: Executing Workflows Using The Cli

    Executing Workflows using the CLI Executing Workflows using the CLI To execute a workflow, use the execute command from within the context of the selected workflow. If the workflow takes no parameters, it will simply execute: dory:maintenance workflow-000> execute hello world! If the workflow takes parameters, the context will become a captive context in which parameters must be specified: dory:maintenance workflow-000>...
  • Page 610 To obtain the checksum property of a workflow, use the get checksum command from the maintenance workflows context: hostname:maintenance workflows> select workflow-001 hostname:maintenance workflow-001> get checksum checksum = 15f4188643d7add37b5ad8bda6d9b4e7210f1cd890a73df176382e800aec Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 611: Integration

    Integration The Oracle ZFS Storage Appliance delivers a full suite of data protocols to communicate with a wide variety of application hosts. To improve application performance or more tightly integrate with your application environment, see the following: White Papers and Solutions Briefs (http://www.oracle.com/technetwork/server- ■...
  • Page 612: Configuring The Oracle Zfs Storage Appliance For Oracle Database Clients

    Configuring the Oracle ZFS Storage Appliance for Oracle Database Clients as a target for Oracle database files and as a backup target for the Oracle Exadata Database Machine and the Oracle SuperCluster. “Oracle Exadata Database Machine Backup” on page 612 ■...
  • Page 613: Configuring The Appliance For Exadata

    IPMP. If the ZFS Storage Appliance is on a different subnet than the Oracle Exadata, it may be necessary to create static routes from the ZFS Storage Appliance to the Oracle Exadata. Consult with your network administrator for details.
  • Page 614 Configure ibp0, ibp1, ibp2, and ibp3 with address 0.0.0.0/8 (necessary for IPMP), connected mode, and partition key ffff. To identify the partition key used by the Oracle Exadata system, run the following command as the root user:># cat /sys/ class/net/ib0/pkey Configure the active/standby IPMP group over ibd0 and ibd3, with ibd0 active and ibd3 standby.
  • Page 615 Configuring Exadata for The Appliance. Configuring Appliance Shares The default options for ZFS Storage Appliance shares provide a good starting point for general- purpose workloads. Appliance shares can be optimized for Oracle RMAN backup and restore operations as follows: Create a project to store all shares related to backup and recovery of a single database. For a ■...
  • Page 616: Configuring Exadata For Appliance

    Configuring Exadata for Appliance If you use the Oracle Exadata Backup Configuration Utility, all steps except for step 4 and step 7 have already been performed for you. Configuring the Appliance for Exadata ■...
  • Page 617 Updating the /etc/fstab File mkdir -p /zfssa/dbname/backup1 mkdir -p /zfssa/dbname/backup2 mkdir -p /zfssa/dbname/backup3 mkdir -p /zfssa/dbname/backup4 Updating the /etc/fstab File The UNIX new-line escape character (\) indicates a single line of code has been wrapped to a second line in the listing below. When entering a wrapped line into fstab, remove the \ character and combine the two line segments, separated by a space, into a single line.
  • Page 618 "Usage: $0 {start|stop|restart|status}" exit 1 esac (Optional) Enable the init.d service for start-on-boot by entering: # chkconfig zfssa_dbname on (Optional) Start and stop the service manually using the service commands: Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 619 # service zfssa_dbname start<br/># service zfssa_dbname stop Updating oranfstab to Access Appliance Exports If you used the Oracle Exadata Backup Configuration Utility, you may optionally perform this procedure. To update the oranfstab file to access ZFS Storage Appliance exports, use the appropriate following option.
  • Page 620 Change the permission settings of the mounted shares to match the permission settings of ORACLE_HOME. In this example, the user and group ownerships are set to oracle:dba. If you used the Oracle Exadata Backup Configuration Utility, you may optionally perform step 2; step 1 has already been performed for you.
  • Page 621: Oracle Supercluster Backup

    Configuring Oracle SPARC SuperCluster for Appliance Backup ■ For detailed information on using your ZFS Storage Appliance as a backup target for Oracle SPARC SuperCluster, see the Configuring a Sun ZFS Backup Appliance with Oracle SPARC SuperCluster white paper on the NAS Storage Documentation page. Also available is an Oracle ZFS Storage ZS3-4 cluster, offered pre-racked with disk shelves as the Oracle ZFS Storage ZS3-BA to minimize set-up complexity.
  • Page 622 Configuring the Oracle SPARC SuperCluster InfiniBand Switches to Add the ZFS Storage Appliance In this procedure, the GUIDs of the ZFS Storage Appliance Infiniband HBA ports are added to the existing Oracle SPARC SuperCluster InfiniBand configuration. By adding these ports and using a partition key of 8503, communication between the two devices can occur.
  • Page 623 Configuring the Oracle SPARC SuperCluster InfiniBand Switches to Add the ZFS Storage Appliance Log on to the Oracle SPARC SuperCluster InfiniBand spine switch as root. By default, the spine switch is given a hostname of <sscid>sw- ib1, where <sscid> is the prefix name given to the entire Oracle SPARC SuperCluster system.
  • Page 624 Configuring the Oracle SPARC SuperCluster InfiniBand Switches to Add the ZFS Storage Appliance # This file is generated, do not edit #! version_number : 11 Default=0x7fff, ipoib : ALL_CAS=full, ALL_SWITCHES=full, SELF= full; SUN_DCS=0x0001, ipoib : ALL_SWITCHES=full; ic1s10 = 0x0501,ipoib,defmember=full: 0x0021280001ef30f7,...
  • Page 625 Configuring the Oracle SPARC SuperCluster InfiniBand Switches to Add the ZFS Storage Appliance Default=0x7fff, ipoib : ALL_CAS=full, ALL_SWITCHES=full, SELF= full; SUN_DCS=0x0001, ipoib : ALL_SWITCHES=full; ic1s10 = 0x0501,ipoib,defmember=full: 0x0021280001ef30f7, 0x0021280001ef33bf, 0x0021280001ef30b7, 0x0021280001ef314b; ic2s10 = 0x0502,ipoib,defmember=full: 0x0021280001ef30f8, 0x0021280001ef33c0, 0x0021280001ef30b8, 0x0021280001ef314c; sto = 0x0503,ipoib,defmember=full:...
  • Page 626 Configuring ZFS Storage Appliance Networking for Single IP Connection This configuration is only for an Oracle SPARC SuperCluster T5 with no external leaf switches. For best failover and performance, use the Active-Active Configuration (next section) for all other configurations.
  • Page 627 Configuring ZFS Storage Appliance Networking for an Active-Active Configuration Configure the IPMP interface on Head 1. Log on to the BUI of Head 1 and navigate to Configuration > Network. ■ Click the plus icon next to Interfaces. The Network Interface dialogue box opens.
  • Page 628 The ZFS Storage Appliance management software presents a warning message about efficiency when two pools with the same RAID protection profile are configured. This message can be safely ignored when configuring for a high-performance Oracle RMAN backup solution.
  • Page 629 Configuring the ZFS Storage Appliance DTrace Analytics The ZFS Storage Appliance includes a comprehensive performance analysis tool called DTrace Analytics. DTrace Analytics is a framework that monitors important subsystem performance accounting statistics. A subset of the available accounting statistics should be monitored to provide comprehensive data on the effectiveness and performance of Oracle RMAN backup and restore workloads.
  • Page 630 Solaris clients are: rw,bg,hard,nointr,rsize=1048576,wsize=1048576,proto=tcp,vers=3,forcedirectio The mount points of the directories created on the ZFS Storage Appliance should be created on each of the Oracle SPARC SuperCluster nodes and added to their /etc/inet/hosts table. Tuning the Solaris 11 Network and Kernel...
  • Page 631 -f $ORACLE_HOME/rdbms/lib/ins_rdbms.mk dnfs_on Update the oranfstab file (located in /$ORACLE_HOME/dbs) with the server, path, and export names specific to the configuration, where:<br/> The server parameter refers to the local name of the ZFS Storage Appliance head on the ■ InfiniBand network.<br/>...
  • Page 632 Restore Optimizing high-bandwidth backup and restore operations using Oracle RMAN and the ZFS Storage Appliance requires adjusting the instance parameters that control I/O buffering. For information about how to tune these parameters, see Article ID 1072545.1: RMAN Performance Tuning Using Buffer Memory Parameters) at My Oracle Support (http:// support.oracle.com).
  • Page 633 SQL> alter system set “_backup_file_bufsz”=1048576; These commands may be configured persistently by adding them to the SPFILE, or they may be set dynamically in the Oracle RMAN run block used to execute the backup or restore operations. The following code fragments show how to dynamically tune the buffer sizes and counts for backup and restore operations.
  • Page 634 Oracle RMAN run block. The srvctl utility is used to install services for Oracle RMAN processing. The following code fragment shows how to create two services evenly distributed over a four-node cluster that are...
  • Page 635 Configuring Oracle RMAN channel and parallelism includes specifying the file system targets for the Oracle RMAN backup channels and the total number of channels used for backup and restore operations. Performance benefits can be realized by configuring 16 Oracle RMAN channels spanning the available ZFS Storage Appliance shares.
  • Page 636 ’alter system set "_backup_disk_bufcnt"=64 scope=memory’;<br/> sql ’alter system set "_backup_disk_bufsz"=1048576 scope=memory’;<br/> allocate channel ch01 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’ format ’/zfssa/dbname/backup1/%U’;<br/> allocate channel ch02 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup2’ format ’/zfssa/dbname/backup2/%U’;<br/> Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 637 Configuring Oracle Direct NFS (dNFS) allocate channel ch03 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’ format ’/zfssa/dbname/backup3/%U’;<br/> allocate channel ch04 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup2’ format ’/zfssa/dbname/backup4/%U’;<br/> allocate channel ch05 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’ format ’/zfssa/dbname/backup1/%U’;<br/> allocate channel ch06 device type disk connect ’sys/welcome@ad01-<br/>...
  • Page 638 ’sys/welcome@ad01-<br/> scan/dbname_bkup2’;<br/> allocate channel ch03 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’;<br/> allocate channel ch04 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup2’;<br/> allocate channel ch05 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’;<br/> Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...
  • Page 639 Configuring Oracle Direct NFS (dNFS) allocate channel ch06 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup2’;<br/> allocate channel ch07 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup1’;<br/> allocate channel ch08 device type disk connect ’sys/welcome@ad01-<br/> scan/dbname_bkup2’;<br/> allocate channel ch09 device type disk connect ’sys/welcome@ad01-<br/>...
  • Page 640: Configuring Oracle Sparc Supercluster For Appliance Backup

    ’/zfssa/dbname/backup1/snapcf_dbname.f’;<br/> restore validate database; Configuring Oracle SPARC SuperCluster for Appliance Backup Use the following procedures to configure the Oracle SPARC SuperCluster for Appliance backup. Configuring the Appliance for SuperCluster Backup ■ Setting Up the Directory Structure to Mount the Shares on the Host ■...
  • Page 641 Updating the /etc/vfstab File mkdir -p /zfssa/dbname/backup1 mkdir -p /zfssa/dbname/backup2 mkdir -p /zfssa/dbname/backup3 mkdir -p /zfssa/dbname/backup4 Updating the /etc/vfstab File The UNIX new-line escape character (\) indicates a single line of code has been wrapped to a second line in the listing below. When entering a wrapped line into fstab, remove the \ character and combine the two line segments, separated by a space, into a single line.
  • Page 642 Enable the NFS Client Service on the Solaris 11 host with the following command: svcadm enable -r nfs/client Updating oranfstab to Access ZFS Storage Appliance Exports To update the oranfstab file to access ZFS Storage Appliance exports, use the appropriate following option. For a one-pool configuration: server: 192.168.36.200 path: 192.168.36.200...
  • Page 643 ORACLE_HOME. In this example, the user and group ownerships are set to oracle:dba. Enter:<br /># chown oracle:dba /zfssa/dbname/* Restart the Oracle Database instance to pick up the changes that were made to the oranfstab file using one of the following options: Restart one instance at a time (rolling upgrade), for example: ■...
  • Page 644: Oracle Intelligent Storage Protocol

    Database Record Size The Oracle dNFS client can pass the optimal record size based on the type of file for each I/O request. If a record size is passed, it overrides the "Database record size" property setting on the share or project.
  • Page 645: Appliance Network File System Plug-In For Oracle Solaris Cluster

    The appliance Network File System Plug In for Oracle Solaris Cluster enables OSC with the appliance using NFS protocol. The plug-in and readme file are available as part of the Oracle ZFS Storage Appliance Network File System Plug-in for Oracle Solaris Cluster on the Oracle Technology Network.
  • Page 646: Configuring For Oracle Enterprise Manager Monitoring

    An oracle_agent Role Properties will be created with limited access to the system, to allow ■ the Oracle Enterprise Manager Grid Controller agent to obtain information required for monitoring, but not to make alterations to the system. An oracle_agent user will be created and assigned this role.
  • Page 647: Unconfiguring Oracle Enterprise Manager Monitoring

    The Oracle Virtual Machine Storage Connect Plug-in for the Oracle ZFS Storage Appliance is a component of the Oracle VM software suite that enables Oracle VM to provision and manage the Oracle ZFS Storage Appliance for virtualization. The plug-in is installed on the Oracle VM Server(s) and communicates with the storage server(s) through workflows installed on the appliance.
  • Page 648: Fc Support With Symantec Dynamic Multi-Pathing And Storage Foundation

    The Oracle ZFS Storage Appliance Provider for Volume Shadow Copy Service Software is a VSS hardware provider that allows the Oracle ZFS Storage Appliance to take consistent snapshots for Windows hosts which are using block targets. VSS coordinates snapshots to ensure block data is consistent.
  • Page 649: Appliance Replication Adapter For Vmware Site Recovery Manager

    Usage of the SRA occurs entirely within the VMware vCenter SRM application. The VMware administrator will need to work closely with the Oracle ZFS Storage Appliance administrator responsible for the appliance that hosts the VMware data stores. For further information, see the Oracle ZFS Storage Appliance SRA for VMware SRM Administration Guide that is packaged in the SRA.
  • Page 650 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016...

Table of Contents