1、NetAppxClusteredDataONTAP8.2SystemAdministrationGuideforVserverAdministratorsNetApp, Inc.495 East Java Drive Sunnyvale, CA 94089 U.S.Part number: 215-07958-A0May 2013Telephone:+1(408)822-60Fax:+1(408)822-4501Supporttelephone:+1(888)463-8277Web:Feedback:doccommentsContentsUnderstandingVserveradminist
2、ration6WhataVserveris6WhyyouuseVSerVerS7DifferencesbetweenclusterandVserveradministrators8DataONTAPmanagementinterfacebasics9UsingtheDataONTAPcommand-lineinterface9MethodsofnavigatingCLlcommanddirectories9RulesforspecifyingvaluesintheCLI10Methodsofviewingcommandhistoryandreissuingcommands10Keyboards
3、hortcutsforeditingCLlcommands11Useofadministrativeprivilegelevels12SettingtheprivilegelevelintheCLI12SettingdisplaypreferencesintheCLI13Methodsofusingqueryoperators14Methodsofusingextendedqueries15Methodsofcustomizingshowcommandoutputbyusingfields15MethodsofaccessingDataONTAPmanpages16AccessingaVser
4、ver17Accessmethodsforuseraccounts17Authenticationmethodsforuseraccounts17LoggingintoaVserver18ManagingVserverauthentication20Changingtheloginpassword20Managingpublickeys21Commandsformanagingpublickeys21Managingdigitalcertificatesforsen,erorclientauthentication22GeneratingandinstallingaCA-signeddigit
5、alcertificateforserverauthentication23Installingaserverintermediatecertificate25Providingmutualauthentication25Commandsformanagingdigitalcertificates2829ManagingSSLCommandsformanagingSSL29AdministeringaVserver30Identifyingthecommandsthatyoucanexecute31DisplayingONTAPAPIs32Managingjobsandschedules33C
6、ommandsformanagingjobs33Commandsformanagingjobschedules34MonitoringVserverperformance35Whatobjects,instances,andcountersare35Decisionstomakebeforeyouviewperformancedata36Viewingperformancedataforatimeperiod37Viewingcontinuouslyupdatedperformancedata38CommandsformonitoringVserverperformance39Displayi
7、nginformationaboutVservers40DisplayinginformationaboutVservcrpeerrelationships41Displayinginformationaboutnetworkconfiguration42MonitoringVserversusingdashboard43Commandsformanagingdashboards43Dataaccessprotocolsconfiguration44Commandsforconfiguringdataaccessprotocols45Datasecuritymanagement46Comman
8、dsforsettingupsecuritysettingsonfilesandmanagingtracing.46Servicesconfiguration47Commandsforconfiguringservices48Storagemanagement48Commandsformanagingstorage49LUNmanagement50CommandsformanagingLUNs50Backupmanagement51Snapshotcopymanagement51SnapMirrormanagement52NDMPmanagement52Commandsformanagingb
9、ackup53PolicyManagement54Commandsformanagingpolicies55Glossary56CopyrightinformationTrademarkinformation60Howtosendyourcomments61Index62UnderStandingVSerVeradministrationAVserveradministratorcanadministeraVse,eranditsresources,suchasvolumes,protocols,andservices,dependingonthecapabilitiesassignedbyt
10、heclusteradministrator.ToadministeraVserverefficiently,youmustunderstandwhataVserveris,itsbenefits,andthetypesofadministrators.WhataVserverisAvirtualstorageserver(Vserver)containsdatavolumesandoneormoreLIFsthroughwhichitservesdatatotheclients.StartingwithclusteredDataONTAP8.1.1,aVservercaneithercont
11、ainoneormoreFlexVolvolumes,orasingleInfiniteVolume.AVserversecurelyisolatesthesharedvirtualizeddatastorageandnetwork,andappearsasasinglededicatedservertoitsclients.EachVserverhasaseparateadministratorauthenticationdomainandcanbemanagedindependentlybyaVser,eradministrator.AclustercanhaveoneormoreVse,
12、erswithFIexVolvolumesandVserverswithInfiniteVolumes.VserverwithFIexVoIvolumesAVserverwithFlexVolvolumesinaNASenvironmentpresentsasingledirectoryhierarchicalviewandhasauniquenamespace.NamespaceenablestheNASclientstoaccessdatawithoutspecifyingthephysicallocationofthedata.Namespacealsoenablesthecluster
13、andVserveradministratorstomanagedistributeddatastorageasasingledirectorywithmultiplelevelsofhierarchy.ThevolumeswithineachNSVserverarerelatedtoeachotherIhroughjunctionsandaremountedOnjunctionpaths.Thesejunctionspresentthefilesystemineachvolume.TherootvolumeofaVserverisaFIexVolvolumethatresidesatthet
14、oplevelofthenamespacehierarchy;additionalvolumesaremountedtotheVserver,srootvolumetoextendthenamespace.AsvolumesarecreatedfortheVserver,therootvolumeofaVserverContainsjunctionpaths.AVserverwithFlexVolvolumescancontainfilesandLUNs.Itprovidesfile-leveldataaccessbyusingNFSandCIFSprotocolsfortheNASclien
15、ts,andblock-leveldataaccessbyusingiSCSI,andFibreChannel(FC)protocol(FCoEincluded)forSANhosts.VserverwithInfiniteVolumeAVserverwithInfiniteVolumecancontainonlyoneInfiniteVolumetoservedata.AVsen,erwithInfiniteVolumeincludesonlyonejunctionpath,whichhasadefaultvalueof/NS.Thejunctionprovidesasinglemountp
16、ointforthelargenamespaceprovidedbytheVserverwithInfiniteVolume.YoucannotaddmorejunctionstoaVserverwithInfiniteVolume.However,youcanincreasethesizeoftheInfiniteVolume.AVserverwithInfiniteVolumecancontainonlyfiles.Itprovidesfile-leveldataaccessbyusingNFSandCIFS(SMB1.0)protocols.AVserverwithInfiniteVol
17、umecannotcontainLUNsanddoesnotprovideblock-leveldataaccess.WhyyouuseVserversVserversprovidedataaccesstoclientswithoutregardtophysicalstorageorcontroller,similartoanystoragesystem.WhenyouuseVservers,theyprovidebenefitssuchasnondisruptiveoperation,scalability,securityandsupportunifiedstorage.AVserverh
18、asthefollowingbenefits:NondisruptiveoperationVserverscanoperatecontinuouslyandIiondisruptivelyforaslongastheyareneeded.Vservershelpclusterstooperatecontinuouslyduringsoftwareandhardwareupgrades,additionandremovalofnodes,andalladministrativeoperations.ScalabilityVsen,ersmeeton-demanddatathroughputand
19、theotherstoragerequirements.SecurityAVserverappearsasasingleindependentserver,whichenablesmultipleVserverstocoexistwhileensuringnodataflowsamongthem.UnifiedStorageVse,erscanservedataconcurrentlythroughmultipledataaccessprotocols.AVserverprovidesfile-leveldataaccessbyusingNASprotocols,suchasCIFSandNF
20、S,andblock-leveldataaccessbyusingSANprotocols,suchasiSCSIandFC(FCoEincluded).AVservercanservedatatoSANandNASclientsindependentlyatthesametime.Note:AVserverwithInfiniteVolumecanservedataonlythroughNFSandCIFS(SMB1.0)protocols.EasyManagementoflargedatasetsWithVserverwithInfiniteVolume,managementoflarge
21、andunstructureddataiseasierastheVserveradministratorhastomanageonedatacontainerinsteadofmany.DifferencesbetweenclusterandVserveradministratorsClusteradministratorsadministertheentireclusterandthevirtualstorageservers(Vservers)itcontains.VserveradministratorsadministeronlytheirowndataVservers.Cluster
22、administratorscanadministertheentireclusteranditsresources.TheycanalsosetupdataVserversanddelegateVserveradministrationtoVserveradministrators.Thespecificcapabilitiesthatclusteradministratorshavedependontheiraccess-controlroles.Bydefault,aclusteradministratorwiththe“admin”accountnameorrolenamehasall
23、capabilitiesformanagingtheclusterandVservers.VserveradministratorscanadministeronlytheirowndataVserversstorageandnetworkresources,suchasvolumes,protocols,LIFs,andservices.ThespecificcapabilitiesthatVserveradministratorshavedependontheaccess-controlrolesthatareassignedbyclusteradministrators.DataONTA
24、PmanagementinterfacebasicsYouadministertheVserverbyusingtheDataONTAPcommand-lineinterface(CLI).TheCLIprovidesacommand-basedmechanismthatissimilartotheUNIXtcshshell.UsingtheDataONTAPcommand-lineinterfaceTheDataONTAPcommand-lineinterface(CLI)providesacommand-basedviewofthemanagementinterface.Youenterc
25、ommandsatthestoragesystemprompt,andcommandresultsaredisplayedintext.TheCLIcommandpromptisrepresentedasvserver_name：.Ifyousettheprivilegelevel(thatis,the-privilegeparameterofthesetcommand)toadvanced,thepromptincludesanasterisk(*),forexample,vserver_name：*.MethodsofnavigatingCLIcommanddirectoriesComma
26、ndsintheCLIareorganizedintoahierarchybycommanddirectories.Youcanruncommandsinthehierarchyeitherbyenteringthefullcommandpathorbynavigatingthroughthedirectorystructure.WhenusingtheCLI,youcanaccessacommanddirectorybytypingthedirectorysnameatthepromptandthenpressingEnter.Thedirectorynameisthenincludedin
27、theprompttexttoindicatethatyouareinteractingwiththeappropriatecommanddirectory.Tomovedeeperintothecommandhierarchy,youtypethenameofacommandsubdirectoryfollowedbypressingEnter.Thesubdirectorynameisthenincludedintheprompttextandthecontextshiftstothatsubdirectory.Youcannavigatethroughseveralcommanddire
28、ctoriesbyenteringtheentirecommand.Forexample,youcandisplayinformationaboutthevolumesbyenteringthevolumeshowcommandattheprompt.Youcanalsorunthecommandbynavigatingthroughonecommanddirectoryatatime,asshowninthefollowingexample:vsl:volumevsl:volumeshowYoucanabbreviatecommandsbyenteringonlytheminimumnumb
29、eroflettersinacommandthatmakesthecommanduniquetothecurrentdirectory.Forexample,toabbreviatethecommandinthepreviousexample,youcanentervolshow.YoucanalsousetheTabkeytoexpandabbreviatedcommandsandtodisplayacommandsparameters,includingdefaultparametervalues.Youcanusethetopcommandtogotothetopleveloftheco
30、mmandhierarchy,mandtogouponelevelinthecommandhierarchy.Note:Commandsandcommandoptionsprecededbyanasterisk(*)intheCLIcanbeexecutedonlyattheadvancedprivilegelevelorhigher.RulesforspecifyingvaluesintheCUMostcommandsincludeoneormorerequiredoroptionalparameters.Manyparametersrequireyoutospecifyavaluefort
31、hem.AfewrulesexistforspecifyingvaluesintheCLI.,Avaluecanbeanumber,aBooleanspecifier,aselectionfromanenumeratedlistofpredefinedvalues,oratextstring.Someparameterscanacceptacomma-separatedlistoftwoormorevalues.Comma-separatedlistsofvaluesdonotneedtobeinquotationmarks(n).Wheneveryouspecifytext,aspace,o
32、raquerycharacter(whennotmeantasaqueryortextstartingwithaless-thanorgreater-thansymbol),youmustenclosetheentityinquotationmarks.TheCLlinterpretsaquestionmark(?”)asthecommandtodisplayhelpinformationforaparticularcommand.SometextthatyouenterintheCLI,suchascommandnames,parameters,andcertainvalues,isnotc
33、ase-sensitive.Forexample,whenyouenterparametervaluesforthevservercifscommands,capitalizationisignored.However,mostparametervalues,suchasthenamesofnodes,Vservers,aggregates,volumes,andlogicalinterfces,arecase-sensitive.Ifyouwanttoclearthevalueofaparameterthattakesatextstring,youspecifyanemptysetofquo
34、tationmarks(,)oradash(,-n).Thehashsign(#),alsoknownasthepoundsign,indicatesacommentforacommand-lineinput;ifused,itshouldappearafterthelastparameterinacommandline.TheCLIignoresthetextbetweenandtheendoftheline.MethodsofviewingcommandhistoryandreissuingcommandsEachCLIsessionkeepsahistoryofallcommandsis
35、suedinit.Youcanviewthecommandhistoryofthesessionthatyouarecurrentlyin.Youcanalsoreissuecommands.Toviewthecommandhistory,youcanusethehistorycommand.Toreissueacommand,youcanusetheredocommandwithoneofthefollowingarguments:AstringthatmatchespartofapreviouscommandForexample,iftheonlyvolumecommandyouhaver
36、unisvolumeshow,youcanusetheredovolumecommandtoreexecutethecommand.ThenumericIDofapreviouscommand,aslistedbythehistorycommandForexample,youcanusetheredo4commandtoreissuethefourthcommandinthehistorylist.AnegativeoffsetfromtheendofthehistorylistForexample,youcanusetheredo-2commandtoreissuethecommandtha
37、tyourantwocommandsago.Forexample,toredothecommandthatisthirdfromtheendofthecommandhistory,youwouldenterthefollowingcommand:vsl:redo-3KeyboardshortcutsforeditingCLIcommandsThecommandatthecurrentcommandpromptisthecurrentactivecommand.Youcaneditthecommandbyusingkeycombinations.Thesekeycombinationsaresi
38、milartothoseoftheUNIXtcshshellandtheEmacseditor.ThefollowingtableliststhekeyboardshortcutsforeditingCLIcommands.Acaret()indicatesthatyoumustpresstheCtrlkeywiththespecifiedkey.EditCommandActionbMovethecursorbackonecharacter.fMovethecursorforwardonecharacter.aMovethecursortothebeginningoftheline.AeMov
39、ethecursortotheendoftheline.kRemovethecontentsoftheeditbuffer,fromthecursortotheendoftheline,andsaveitinthecutbuffer.yYankthecontentsofthecutbuffer,pushingitintotheeditbufferatthecursor.ESCbMovethecursorbackoneword.ESCfMovethecursorforwardoneword.ESCdCutthecontentsoftheeditbuffer,beginningatthecurso
40、randcontinuingtotheendofthefollowingword.wDeletethewordbeforethecursor.hDeletethecharacterbeforethecursor.BackspaceDeletethecharacterbeforethecursor.dDeletethecharacterafterthecursor.pReplacethecurrentcontentsoftheeditbufferwiththepreviousentryonthehistorylist.Foreachsuccessivepaction,thehistorycurs
41、ormovestothepreviousentry.11Replacethecurrentcontentsoftheeditbufferwiththenextentryonthehistorybuffer.DownarrowDownhistory.UParrowUphistory.IEditCommandIActionBackarrowGobackwardonecharacter.Forw,ardarrowGoforwardonecharacter.AqTTYstartoutput.sTTYstopoutput.uClearthecurrenteditbuffer.vEscapesaspeci
42、almappingforthefollowingcharacter.Forinstance,toenteraquestionmarkintoacommandsarguments,pressv,thenpress?.?Displaycontext-sensitivehelp.UseofadministrativeprivilegelevelsDataONTAPcommandsandparametersaredefinedatthreeprivilegelevels:admin,advanced,anddiagnostic.Theprivilegelevelsreflecttheskillleve
43、lsrequiredinperformingthetasks.adminMostcommandsandparametersareavailableatthislevel.Theyareusedforcommonorroutinetasks.advancedCommandsandparametersatthislevelareusedinfrequently,requireadvancedknowledge,andcancauseproblemsifusedinappropriately.Youuseadvancedcommandsorparametersonlywiththeadviceofs
44、upportpersonnel.diagnosticDiagnosticcommandsandparametersarepotentiallydisruptive.Theyareusedonlybysupportpersonneltodiagnoseandfixproblems.SettingtheprivilegelevelintheCUYoucansettheprivilegelevelintheCLIbyusingthesetcommand.Changestoprivilegelevelsettingsapplyonlytothesessionyouarein.Theyarenotper
45、sistentacrosssessions.Step1.TosettheprivilegelevelintheCLI,usethesetcommandwiththe-privilegeparameter.ExampleofsettingtheprivilegelevelThefollowingexamplesetstheprivilegeleveltoadvancedandthentoadmin:vsl:set-privilegeadvancedWarning:Theseadvancedcommandsarepotentiallydangerous;usethemonlywhendirecte
46、dtodosobytechnicalsupport.Doyouwishtocontinue?(yorn):yvsl:*set-privilegeadminSettingdisplaypreferencesintheCUYoucansetdisplaypreferencesforaCLIsessionbyusingthesetcommandandrowscommand.Thepreferencesyousetapplyonlytothesessionyouarein.Theyarenotpersistentacrosssessions.AboutthistaskYoucansetthefollo
47、wingCLIdisplaypreferences:,TheprivilegelevelofthecommandsessionWhetherconfirmationsareissuedforpotentiallydisnptivecommands WhethershowcommandsdisplayallfieldsThecharacterorcharacterstouseasthefieldseparator ThedefaultunitwhenreportingdatasizesThenumberofrowsthescreendisplaysinthecurrentCLIsessionbeforetheinterfacepausesoutputIfyouareconnectedtothesystemthroughaconsoleconnection,thedefaultnumberofrowsis24.IfyouareconnectedtothesystemthroughanSSHconnection,thenumberofdefaultrowsisdete
