Net 装机维护 ClusteredDataONTAP82SystemAdministrationECMP1196807.docx

《Net 装机维护 ClusteredDataONTAP82SystemAdministrationECMP1196807.docx》由会员分享，可在线阅读，更多相关《Net 装机维护 ClusteredDataONTAP82SystemAdministrationECMP1196807.docx（64页珍藏版）》请在三一文库上搜索。

1、NetAppxClusteredDataONTAP8.2SystemAdministrationGuideforVserverAdministratorsNetApp, Inc.495 East Java Drive Sunnyvale, CA 94089 U.S.Part number: 215-07958-A0May 2013Telephone:+1(408)822-60Fax:+1(408)822-4501Supporttelephone:+1(888)463-8277Web:Feedback:doccommentsContentsUnderstandingVserveradminist

2、ration6WhataVserveris6WhyyouuseVSerVerS7DifferencesbetweenclusterandVserveradministrators8DataONTAPmanagementinterfacebasics9UsingtheDataONTAPcommand-lineinterface9MethodsofnavigatingCLlcommanddirectories9RulesforspecifyingvaluesintheCLI10Methodsofviewingcommandhistoryandreissuingcommands10Keyboards

3、hortcutsforeditingCLlcommands11Useofadministrativeprivilegelevels12SettingtheprivilegelevelintheCLI12SettingdisplaypreferencesintheCLI13Methodsofusingqueryoperators14Methodsofusingextendedqueries15Methodsofcustomizingshowcommandoutputbyusingfields15MethodsofaccessingDataONTAPmanpages16AccessingaVser

4、ver17Accessmethodsforuseraccounts17Authenticationmethodsforuseraccounts17LoggingintoaVserver18ManagingVserverauthentication20Changingtheloginpassword20Managingpublickeys21Commandsformanagingpublickeys21Managingdigitalcertificatesforsen,erorclientauthentication22GeneratingandinstallingaCA-signeddigit

5、alcertificateforserverauthentication23Installingaserverintermediatecertificate25Providingmutualauthentication25Commandsformanagingdigitalcertificates2829ManagingSSLCommandsformanagingSSL29AdministeringaVserver30Identifyingthecommandsthatyoucanexecute31DisplayingONTAPAPIs32Managingjobsandschedules33C

6、ommandsformanagingjobs33Commandsformanagingjobschedules34MonitoringVserverperformance35Whatobjects,instances,andcountersare35Decisionstomakebeforeyouviewperformancedata36Viewingperformancedataforatimeperiod37Viewingcontinuouslyupdatedperformancedata38CommandsformonitoringVserverperformance39Displayi

7、nginformationaboutVservers40DisplayinginformationaboutVservcrpeerrelationships41Displayinginformationaboutnetworkconfiguration42MonitoringVserversusingdashboard43Commandsformanagingdashboards43Dataaccessprotocolsconfiguration44Commandsforconfiguringdataaccessprotocols45Datasecuritymanagement46Comman

8、dsforsettingupsecuritysettingsonfilesandmanagingtracing.46Servicesconfiguration47Commandsforconfiguringservices48Storagemanagement48Commandsformanagingstorage49LUNmanagement50CommandsformanagingLUNs50Backupmanagement51Snapshotcopymanagement51SnapMirrormanagement52NDMPmanagement52Commandsformanagingb

9、ackup53PolicyManagement54Commandsformanagingpolicies55Glossary56CopyrightinformationTrademarkinformation60Howtosendyourcomments61Index62UnderStandingVSerVeradministrationAVserveradministratorcanadministeraVse,eranditsresources,suchasvolumes,protocols,andservices,dependingonthecapabilitiesassignedbyt

10、heclusteradministrator.ToadministeraVserverefficiently,youmustunderstandwhataVserveris,itsbenefits,andthetypesofadministrators.WhataVserverisAvirtualstorageserver(Vserver)containsdatavolumesandoneormoreLIFsthroughwhichitservesdatatotheclients.StartingwithclusteredDataONTAP8.1.1,aVservercaneithercont

11、ainoneormoreFlexVolvolumes,orasingleInfiniteVolume.AVserversecurelyisolatesthesharedvirtualizeddatastorageandnetwork,andappearsasasinglededicatedservertoitsclients.EachVserverhasaseparateadministratorauthenticationdomainandcanbemanagedindependentlybyaVser,eradministrator.AclustercanhaveoneormoreVse,

12、erswithFIexVolvolumesandVserverswithInfiniteVolumes.VserverwithFIexVoIvolumesAVserverwithFlexVolvolumesinaNASenvironmentpresentsasingledirectoryhierarchicalviewandhasauniquenamespace.NamespaceenablestheNASclientstoaccessdatawithoutspecifyingthephysicallocationofthedata.Namespacealsoenablesthecluster

13、andVserveradministratorstomanagedistributeddatastorageasasingledirectorywithmultiplelevelsofhierarchy.ThevolumeswithineachNSVserverarerelatedtoeachotherIhroughjunctionsandaremountedOnjunctionpaths.Thesejunctionspresentthefilesystemineachvolume.TherootvolumeofaVserverisaFIexVolvolumethatresidesatthet

14、oplevelofthenamespacehierarchy;additionalvolumesaremountedtotheVserver,srootvolumetoextendthenamespace.AsvolumesarecreatedfortheVserver,therootvolumeofaVserverContainsjunctionpaths.AVserverwithFlexVolvolumescancontainfilesandLUNs.Itprovidesfile-leveldataaccessbyusingNFSandCIFSprotocolsfortheNASclien

15、ts,andblock-leveldataaccessbyusingiSCSI,andFibreChannel(FC)protocol(FCoEincluded)forSANhosts.VserverwithInfiniteVolumeAVserverwithInfiniteVolumecancontainonlyoneInfiniteVolumetoservedata.AVsen,erwithInfiniteVolumeincludesonlyonejunctionpath,whichhasadefaultvalueof/NS.Thejunctionprovidesasinglemountp

16、ointforthelargenamespaceprovidedbytheVserverwithInfiniteVolume.YoucannotaddmorejunctionstoaVserverwithInfiniteVolume.However,youcanincreasethesizeoftheInfiniteVolume.AVserverwithInfiniteVolumecancontainonlyfiles.Itprovidesfile-leveldataaccessbyusingNFSandCIFS(SMB1.0)protocols.AVserverwithInfiniteVol

17、umecannotcontainLUNsanddoesnotprovideblock-leveldataaccess.WhyyouuseVserversVserversprovidedataaccesstoclientswithoutregardtophysicalstorageorcontroller,similartoanystoragesystem.WhenyouuseVservers,theyprovidebenefitssuchasnondisruptiveoperation,scalability,securityandsupportunifiedstorage.AVserverh

18、asthefollowingbenefits:NondisruptiveoperationVserverscanoperatecontinuouslyandIiondisruptivelyforaslongastheyareneeded.Vservershelpclusterstooperatecontinuouslyduringsoftwareandhardwareupgrades,additionandremovalofnodes,andalladministrativeoperations.ScalabilityVsen,ersmeeton-demanddatathroughputand

19、theotherstoragerequirements.SecurityAVserverappearsasasingleindependentserver,whichenablesmultipleVserverstocoexistwhileensuringnodataflowsamongthem.UnifiedStorageVse,erscanservedataconcurrentlythroughmultipledataaccessprotocols.AVserverprovidesfile-leveldataaccessbyusingNASprotocols,suchasCIFSandNF

20、S,andblock-leveldataaccessbyusingSANprotocols,suchasiSCSIandFC(FCoEincluded).AVservercanservedatatoSANandNASclientsindependentlyatthesametime.Note:AVserverwithInfiniteVolumecanservedataonlythroughNFSandCIFS(SMB1.0)protocols.EasyManagementoflargedatasetsWithVserverwithInfiniteVolume,managementoflarge

21、andunstructureddataiseasierastheVserveradministratorhastomanageonedatacontainerinsteadofmany.DifferencesbetweenclusterandVserveradministratorsClusteradministratorsadministertheentireclusterandthevirtualstorageservers(Vservers)itcontains.VserveradministratorsadministeronlytheirowndataVservers.Cluster

22、administratorscanadministertheentireclusteranditsresources.TheycanalsosetupdataVserversanddelegateVserveradministrationtoVserveradministrators.Thespecificcapabilitiesthatclusteradministratorshavedependontheiraccess-controlroles.Bydefault,aclusteradministratorwiththe“admin”accountnameorrolenamehasall

23、capabilitiesformanagingtheclusterandVservers.VserveradministratorscanadministeronlytheirowndataVserversstorageandnetworkresources,suchasvolumes,protocols,LIFs,andservices.ThespecificcapabilitiesthatVserveradministratorshavedependontheaccess-controlrolesthatareassignedbyclusteradministrators.DataONTA

24、PmanagementinterfacebasicsYouadministertheVserverbyusingtheDataONTAPcommand-lineinterface(CLI).TheCLIprovidesacommand-basedmechanismthatissimilartotheUNIXtcshshell.UsingtheDataONTAPcommand-lineinterfaceTheDataONTAPcommand-lineinterface(CLI)providesacommand-basedviewofthemanagementinterface.Youenterc

25、ommandsatthestoragesystemprompt,andcommandresultsaredisplayedintext.TheCLIcommandpromptisrepresentedasvserver_name：.Ifyousettheprivilegelevel(thatis,the-privilegeparameterofthesetcommand)toadvanced,thepromptincludesanasterisk(*),forexample,vserver_name：*.MethodsofnavigatingCLIcommanddirectoriesComma

26、ndsintheCLIareorganizedintoahierarchybycommanddirectories.Youcanruncommandsinthehierarchyeitherbyenteringthefullcommandpathorbynavigatingthroughthedirectorystructure.WhenusingtheCLI,youcanaccessacommanddirectorybytypingthedirectorysnameatthepromptandthenpressingEnter.Thedirectorynameisthenincludedin

27、theprompttexttoindicatethatyouareinteractingwiththeappropriatecommanddirectory.Tomovedeeperintothecommandhierarchy,youtypethenameofacommandsubdirectoryfollowedbypressingEnter.Thesubdirectorynameisthenincludedintheprompttextandthecontextshiftstothatsubdirectory.Youcannavigatethroughseveralcommanddire

28、ctoriesbyenteringtheentirecommand.Forexample,youcandisplayinformationaboutthevolumesbyenteringthevolumeshowcommandattheprompt.Youcanalsorunthecommandbynavigatingthroughonecommanddirectoryatatime,asshowninthefollowingexample:vsl:volumevsl:volumeshowYoucanabbreviatecommandsbyenteringonlytheminimumnumb

29、eroflettersinacommandthatmakesthecommanduniquetothecurrentdirectory.Forexample,toabbreviatethecommandinthepreviousexample,youcanentervolshow.YoucanalsousetheTabkeytoexpandabbreviatedcommandsandtodisplayacommandsparameters,includingdefaultparametervalues.Youcanusethetopcommandtogotothetopleveloftheco

30、mmandhierarchy,mandtogouponelevelinthecommandhierarchy.Note:Commandsandcommandoptionsprecededbyanasterisk(*)intheCLIcanbeexecutedonlyattheadvancedprivilegelevelorhigher.RulesforspecifyingvaluesintheCUMostcommandsincludeoneormorerequiredoroptionalparameters.Manyparametersrequireyoutospecifyavaluefort

31、hem.AfewrulesexistforspecifyingvaluesintheCLI.,Avaluecanbeanumber,aBooleanspecifier,aselectionfromanenumeratedlistofpredefinedvalues,oratextstring.Someparameterscanacceptacomma-separatedlistoftwoormorevalues.Comma-separatedlistsofvaluesdonotneedtobeinquotationmarks(n).Wheneveryouspecifytext,aspace,o

32、raquerycharacter(whennotmeantasaqueryortextstartingwithaless-thanorgreater-thansymbol),youmustenclosetheentityinquotationmarks.TheCLlinterpretsaquestionmark(?”)asthecommandtodisplayhelpinformationforaparticularcommand.SometextthatyouenterintheCLI,suchascommandnames,parameters,andcertainvalues,isnotc

33、ase-sensitive.Forexample,whenyouenterparametervaluesforthevservercifscommands,capitalizationisignored.However,mostparametervalues,suchasthenamesofnodes,Vservers,aggregates,volumes,andlogicalinterfces,arecase-sensitive.Ifyouwanttoclearthevalueofaparameterthattakesatextstring,youspecifyanemptysetofquo

34、tationmarks(,)oradash(,-n).Thehashsign(#),alsoknownasthepoundsign,indicatesacommentforacommand-lineinput;ifused,itshouldappearafterthelastparameterinacommandline.TheCLIignoresthetextbetweenandtheendoftheline.MethodsofviewingcommandhistoryandreissuingcommandsEachCLIsessionkeepsahistoryofallcommandsis

35、suedinit.Youcanviewthecommandhistoryofthesessionthatyouarecurrentlyin.Youcanalsoreissuecommands.Toviewthecommandhistory,youcanusethehistorycommand.Toreissueacommand,youcanusetheredocommandwithoneofthefollowingarguments:AstringthatmatchespartofapreviouscommandForexample,iftheonlyvolumecommandyouhaver

36、unisvolumeshow,youcanusetheredovolumecommandtoreexecutethecommand.ThenumericIDofapreviouscommand,aslistedbythehistorycommandForexample,youcanusetheredo4commandtoreissuethefourthcommandinthehistorylist.AnegativeoffsetfromtheendofthehistorylistForexample,youcanusetheredo-2commandtoreissuethecommandtha

37、tyourantwocommandsago.Forexample,toredothecommandthatisthirdfromtheendofthecommandhistory,youwouldenterthefollowingcommand:vsl:redo-3KeyboardshortcutsforeditingCLIcommandsThecommandatthecurrentcommandpromptisthecurrentactivecommand.Youcaneditthecommandbyusingkeycombinations.Thesekeycombinationsaresi

38、milartothoseoftheUNIXtcshshellandtheEmacseditor.ThefollowingtableliststhekeyboardshortcutsforeditingCLIcommands.Acaret()indicatesthatyoumustpresstheCtrlkeywiththespecifiedkey.EditCommandActionbMovethecursorbackonecharacter.fMovethecursorforwardonecharacter.aMovethecursortothebeginningoftheline.AeMov

39、ethecursortotheendoftheline.kRemovethecontentsoftheeditbuffer,fromthecursortotheendoftheline,andsaveitinthecutbuffer.yYankthecontentsofthecutbuffer,pushingitintotheeditbufferatthecursor.ESCbMovethecursorbackoneword.ESCfMovethecursorforwardoneword.ESCdCutthecontentsoftheeditbuffer,beginningatthecurso

40、randcontinuingtotheendofthefollowingword.wDeletethewordbeforethecursor.hDeletethecharacterbeforethecursor.BackspaceDeletethecharacterbeforethecursor.dDeletethecharacterafterthecursor.pReplacethecurrentcontentsoftheeditbufferwiththepreviousentryonthehistorylist.Foreachsuccessivepaction,thehistorycurs

41、ormovestothepreviousentry.11Replacethecurrentcontentsoftheeditbufferwiththenextentryonthehistorybuffer.DownarrowDownhistory.UParrowUphistory.IEditCommandIActionBackarrowGobackwardonecharacter.Forw,ardarrowGoforwardonecharacter.AqTTYstartoutput.sTTYstopoutput.uClearthecurrenteditbuffer.vEscapesaspeci

42、almappingforthefollowingcharacter.Forinstance,toenteraquestionmarkintoacommandsarguments,pressv,thenpress?.?Displaycontext-sensitivehelp.UseofadministrativeprivilegelevelsDataONTAPcommandsandparametersaredefinedatthreeprivilegelevels:admin,advanced,anddiagnostic.Theprivilegelevelsreflecttheskillleve

43、lsrequiredinperformingthetasks.adminMostcommandsandparametersareavailableatthislevel.Theyareusedforcommonorroutinetasks.advancedCommandsandparametersatthislevelareusedinfrequently,requireadvancedknowledge,andcancauseproblemsifusedinappropriately.Youuseadvancedcommandsorparametersonlywiththeadviceofs

44、upportpersonnel.diagnosticDiagnosticcommandsandparametersarepotentiallydisruptive.Theyareusedonlybysupportpersonneltodiagnoseandfixproblems.SettingtheprivilegelevelintheCUYoucansettheprivilegelevelintheCLIbyusingthesetcommand.Changestoprivilegelevelsettingsapplyonlytothesessionyouarein.Theyarenotper

45、sistentacrosssessions.Step1.TosettheprivilegelevelintheCLI,usethesetcommandwiththe-privilegeparameter.ExampleofsettingtheprivilegelevelThefollowingexamplesetstheprivilegeleveltoadvancedandthentoadmin:vsl:set-privilegeadvancedWarning:Theseadvancedcommandsarepotentiallydangerous;usethemonlywhendirecte

46、dtodosobytechnicalsupport.Doyouwishtocontinue?(yorn):yvsl:*set-privilegeadminSettingdisplaypreferencesintheCUYoucansetdisplaypreferencesforaCLIsessionbyusingthesetcommandandrowscommand.Thepreferencesyousetapplyonlytothesessionyouarein.Theyarenotpersistentacrosssessions.AboutthistaskYoucansetthefollo

47、wingCLIdisplaypreferences:,TheprivilegelevelofthecommandsessionWhetherconfirmationsareissuedforpotentiallydisnptivecommands WhethershowcommandsdisplayallfieldsThecharacterorcharacterstouseasthefieldseparator ThedefaultunitwhenreportingdatasizesThenumberofrowsthescreendisplaysinthecurrentCLIsessionbeforetheinterfacepausesoutputIfyouareconnectedtothesystemthroughaconsoleconnection,thedefaultnumberofrowsis24.IfyouareconnectedtothesystemthroughanSSHconnection,thenumberofdefaultrowsisdete