146595429 NetApp NCDA Exercise Guide 2

5/22/2018 146595429 NetApp NCDA Exercise Guide 2

1/209

NETAPP UNIVERSITY

Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode

Exercise GuideCourse Number: STRSW-ILT-ANCDA-D87MCatalog Number: STRSW-ILT-ANCDA-D87M-EGContent Version: 1.0


2/209

E-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Welcome

2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.

ATTENTION

The information contained in this guide is intended for training use only. This guide contains informationand activities that, while beneficial for the purposes of training in a closed, non-production environment,can result in downtime or other severe consequences and therefore are not intended as a reference guide. This guide is not a technicalreference and should not, under any circumstances, be used in production environments. To obtain reference materials, please refer to theNetApp product documentation located at http://now.netapp.com/ for product information.

COPYRIGHT

2010 NetApp, Inc. All rights reserved. Printed in the U.S.A. Specifications subject to change without notice.

No part of this book covered by copyright may be reproduced in any form or by any meansgraphic, electronic, or mechanical, includingphotocopying, recording, taping, or storage in an electronic retrieval systemwithout prior written permission of the copyright owner.

NetApp reserves the right to change any products described herein at any time and without notice.NetApp assumes no responsibility or liability arising from the use of products or materials describedherein, except as expressly agreed to in writing by NetApp. The use or purchase of this product ormaterials does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp.

The product described in this manual may be protected by one or more U.S. patents, foreign patents,or pending applications.

RESTRICTED RIGHTS LEGENDNetApp Documentation is protected by Copyright and is provided to U.S. Government Agencies with LIMITED RIGHTS as defined at FAR52.227-14(a). Use, duplication, or disclosure by the U.S. Government is subject to the restrictions as set forth therein. In the event of use bDOD agency, the Government's rights in Documentation are governed by the restrictions in the Technical Data Commercial Items clause atDFARS 252.227-7015 and the Commercial Computer Software and Commercial Computer Software Documentation clause at DFARS252.227-7202.

TRADEMARK INFORMATION

NetApp, the NetApp logo, Go Further, Faster, Data ONTAP, Appliance Watch, ASUP, AutoSupport, Bolt Design, Center-to-Edge,ComplianceClock, ComplianceJournal, ContentDirector, Cryptainer, Data Motion, DataFabric, DataFort, Decru, Decru DataFort, Evolution oStorage, Exec-Vault, FAServer, FilerView, FlexCache, FlexClone, FlexShare, FlexVol, FPolicy, Get Successful, gFiler, LockVault, ManageONTAP, MultiStore, NearStore, NetApp Availability Assurance, NetApp IT As A Service, NetApp ProTech Expert, NetCache, NOW, NOW(NetApp on the Web), ONTAPI, Raid-DP, Replicator-X, SANscreen, SecureAdmin, SecureShare, Shadow Tape, Simulate ONTAP,SmartClone, SnapCache, SnapCopy, SnapDrive, SnapLock, SnapManager, SnapMirror, SnapMover, SnapRestore, Snapshot, SnapStore,SnapSuite, SnapValidator, SnapVault, Spinnaker Networks, Spinnaker Networks logo, SpinCluster, SpinFlex, SpinFS, SpinHA, SpinMove,SpinServer, SpinStor, StoreVault, SyncMirror, Tech OnTap, Topio, vFiler, VFM, VFM (Virtual File Manager), WAFL, and Web Filer are eithetrademarks, registered trademarks, or service marks of NetApp, Inc. in the United States and/or other countries.

Not all common law marks used by NetApp are listed on this page. Failure of a common law mark to appear on this page does not mean thNetApp does not use the mark nor does it mean that the product is not actively marketed or is not significant within its relevant market.

Apple and QuickTime are either trademarks or registered trademarks of Apple Computer, Inc. in the United States and/or other countries.

Microsoft and Windows Media are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or othercountries.

RealAudio, RealNetworks, RealPlayer, RealSystem, RealText, RealVideo, RealMedia, RealProxy, and SureStream are either trademarks oregistered trademarks of RealNetworks, Inc. in the United States and/or other countries.

All other brands or products are either trademarks or registered trademarks of their respective holders and should be treated as such.

NetApp is a licensee of the CompactFlash and CF Logo trademarks.


3/209

E-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Welcome


TABLE OF CONTENTS

MODULE 1: NCDA OVERVIEW ....................................................................................................................... E1-

MODULE 2: NFS OVERVIEW .......................................................................................................................... E2-

MODULE 3: NFS SETUP .................................................................................................................................. E3-

MODULE 4: EXPORTS AND MOUNTS ........................................................................................................... E4-

MODULE 5: CIFS OVERVIEW ......................................................................................................................... E5-

MODULE 6: CIFS WORKGROUPS .................................................................................................................. E6-

MODULE 7: CIFS SHARES AND SESSIONS ................................................................................................. E7-

MODULE 8: CIFS ACCESS CONTROL ........................................................................................................... E8-

MODULE 9: CIFS DOMAINS ............................................................................................................................. E9-

MODULE 10: NAS MULTIPROTOCOL .......................................................................................................... E10-

MODULE 11: NAS TROUBLESHOOTING ..................................................................................................... E11-

MODULE 12: SAN OVERVIEW ...................................................................................................................... E12-

MODULE 13: FC CONNECTIVITY ................................................................................................................. E13-

MODULE 14: ISCSI CONNECTIVITY ............................................................................................................. E14-

MODULE 15: LUN ACCESS .......................................................................................................................... E15-

MODULE 16: AVAILABILITY OVERVIEW ..................................................................................................... E16-

MODULE 17: SNAPSHOT COPIES ............................................................................................................... E17-

MODULE 18: SNAPRESTORE ...................................................................................................................... E18-

MODULE 19: SNAPVAULT ............................................................................................................................ E19-

MODULE 20: OPEN SYSTEMS SNAPVAULT .............................................................................................. E20-

MODULE 21: HIGH AVAILABILITY ............................................................................................................... E21-

MODULE 22: METROCLUSTER .................................................................................................................... E22-

MODULE 23: SNAPMIRROR ......................................................................................................................... E23-

MODULE 24: PERFORMANCE ...................................................................................................................... E24-

APPENDIX A: ANSWERS ................................................................................................................................ EA-

APPENDIX B: MASTER CONFIGURATION WORKSHEET .......................................................................... EB-


4/209

E1-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NCDA Overview


MODULE 1: NCDA OVERVIEW

EXERCISE

OVERVIEW

In this exercise, you will identify your primary client machine for the course and install NetApp System Mana

on that machine.

OBJECTIVES

By the end of this exercise, you should be able to:

Identify the exercise environment

Log in to the exercise environment Install NetApp System Manager within your exercise environment

TIME ESTIMATE

15 minutes


5/209



EXERCISE 1: NCDA OVERVIEW

To prepare for the exercise environment, you will identify your main client machine, log in to the machine, and

install NetApp System Manager.

TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT

In this task, you will log in to your assigned exercise environment. You will perform all other actions starting fr

this assigned machine.

STEP ACTION

1. Your instructor will assist you in identifying your main Windows Server. NOTE:This machine

might be a virtual machine.

With the assistance of your instructor, identify the following essential equipment:

DESKTOP CONNECTION

Name: _____________________________

IP address: __________________________Local Administrator

Password: ___________________________

Domain Administrator

Password: ___________________________

2. Task complete.

Windows Server


6/209



TASK 2: LOG IN TO THE EXERCISE ENVIRONMENT

In this task, you will log in to your assigned exercise environment. You will perform all other actions starting fr

this assigned machine.

STEP ACTION

1. In this task, you will log in to your assigned exercise environment by way of Remote Desktop

Connection. From this remote Windows environment, you will then have access to your exerciseenvironment.

On your local Windows machine, log in to the remote Windows machine through the Remote

Desktop Connection tool.

Click the Remote Desktop Connectionlink on your desktop. If this link is not available, then ask

your instructor where to find the tool.

Type your IP addressin to the Computer combo box and click the Connectbutton.

You might be asked to authenticate. If so, provide the user name and password given to you by your

instructor.

You should see the desktop of the remote machine. All other tasks will be initiated from this remote

machine.

2. Task complete.


7/209



TASK 3: INSTALL NETAPP SYSTEM MANAGER

In this task, you will install NetApp System Manager on your Windows Server machine.

STEP ACTION

1. On your assigned Windows Server machine, open Windows Explorer and navigate to

C:\_files\ANCDA. You might have a shortcut on your desktop to facilitate this step.

Double-click system-manager-setup-1-1.exe. If prompted with a security warning, confirm by

clicking Run.

The installation wizard should begin.

Click Nextto start the wizard.

2. On the license agreement, select the I Agree radio button, and then click Next.

3. Select the default installation location and click Everyone to ensure that any user on this machine

can run this program and click Next.

4. Confirm the installation by clicking Nextagain.


8/209



STEP ACTION

5. After the installation has completed, you should see a dialog window indicating that the install was

successful.

Click Closeto close the installation dialog window.

6. The Launch System Manager window should appear.

Click Cancelso that NetApp System Manager does not launch.

7. Task complete.

END OF EXERCISE


9/209

E2-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview


MODULE 2: NFS OVERVIEW

EXERCISE

OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment.

OBJECTIVES


Identify the exercise environment

Log in to your assigned storage system

Log in to NetApp System Manager and add your storage system

TIME ESTIMATE

15 minutes


10/209



EXERCISE 2: NFS OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment with the

assistance of your instructor.


This task familiarizes you with the exercise environment you will use for all exercises in this course. NOTE:Y

Windows client was identified in the previous module.

STEP ACTION

1. With the assistance of your instructor, identify the following essential equipment:

STORAGE SYSTEM CONNECTION

Name: ______________________________

Internal IP address: __________________________

Terminal IP address: _________________________

Root Password: ____________________________


UNIX/LINUX CONNECTION

NOTE:This machine might be a virtual machine.

Name: _____________________________

IP address: __________________________

Root

Password: ___________________________

3. Task complete.

Storage System

UNIX/LUNIX

Workstation


11/209



TASK 2: LOG IN TO YOUR ASSIGNED STORAGE SYSTEM

In this task, you will log in to your assigned storage system and enable SNMP control so NetApp System Manag

can manage it.

STEP ACTION

1. Log in to the storage system that has been assigned to you.

Double-click the link to PuTTYon your Windows Server desktop.

Enter the IP addressto your assigned storage system and select theTelnetradio button. You use

either the NIC interface address or the console address and port if available. NOTE:If you use a

NIC interface address, Data ONTAP 8.0 7-Mode defaults to have SSH enabled. You might need

to change the radio button to SSHif Telnet is disabled.

You might want to save this configuration for future use. Type a name in to the Saved Sessions text

box and click the Save button.

To open a session with your storage system, click the Openbutton.

2. On the storage system, type:

system> options snmp

If SNMP is not enabled, enter the following to turn it on:

system> options snmp.enable on

Verify it is enabled by entering the following:

system> options snmp

3. Task complete.


12/209



TASK 3: LOG IN TO NETAPP SYSTEM MANAGER AND ADD YOUR STORAGE SYSTEM

In this task, you will set up NetApp System Manager to administer your assigned storage system.

STEP ACTION

1. On your remote Windows Server desktop, double click the NetApp System Manager desktop icon

found on your desktop.

NetApp System Manager should launch.

2. Click the Addbutton to associate your storage system to NetApp System Manager.

Type in the IP address of e0aon storage system and click Add System.


13/209



STEP ACTION

3. Your storage system should be added to NetApp System Manager. NOTE: you shouldrefer to theData ONTAP 8.0 7-Mode Administrationcourse for more details about

configuring your storage system with NetApp System Manager.

In the left pane of NetApp System Manager, expand the node that represents your storagesystem by clicking the plus (+) icon next to the name.

Select the Storagenode.

Your storage system is probably not configured yet for storage access. Click the Storage

Configuration Wizardlink.

The Storage Configuration Wizard should start.

4. We will manually configure storage in this class. Again, see theData ONTAP 8.0 7-ModeAdministration course for more details.

Click Next to continue on with the wizard.

5. On the Configure Aggregates page of the wizard, select Manually create aggregates.

Click Next.

6. Click Finishto end the wizard.

7. The Storage node should now have additional items. Click the plus (+)icon next to the

Storage node to expand and view the items available.

If you have never used NetApp System Manager, you might want to explore the items on

your own.

8. Task complete.

END OF EXERCISE


14/209

E3-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup


MODULE 3: NFS SETUP

EXERCISE

OVERVIEW

Setting up NFS services on a NetApp storage system is easy. You will configure the NFS services in this

exercise as well as allow your assigned UNIX or LINUX machine to be an admin host for your assigned storage

system. This will allow your client host to have default access to your root volumes configuration file.

OBJECTIVES


License and configure NFS service

Add an admin host by way of the setupcommand

TIME ESTIMATE

20 minutes


15/209



EXERCISE 3: NFS SETUP

To set up a NetApp storage system for NFS traffic, you will have to license the storage system and verify the

settings.

START OF EXERCISE

TASK 1: LICENSE AND CONFIGURE THE NFS SERVICE

In this task, you will license and verify the current configuration of the NFS service.

STEP ACTION

1. Open a PuTTY session to your storage system.

2. Check whether NFS is licensed on your system with the license command.

system> license

If NFS is not licensed, license the NFS protocol on your storage system.

system> license add XXXXXXX (obtain license code from your instructor)

3. Open up NetApp System Manager; notice that under the Configuration node and Licenses node thatthe NFS license was added.

Other changes caused by adding the NFS license include: Storage > Shared Folders > Exports Configuration > Protocols > NFS

4. From the Configuration > Protocols > NFS page within NetApp System Manager, select the Editbutton.

The Edit NFS Configuration should appear.


16/209



STEP ACTION

5. NOTE:The NFS versions are available from the Versionstab.

6. NOTE: View the Transport Protocols that are currently configured by selecting theTransport Protocolstab.

7. NOTE:Other settings are available by selecting the Miscellaneoustab.

8. From the PuTTY sessions, verify the NFS protocol setting using the command-line interface:

system> options nfs

In the following steps, we will verify individual settings.


17/209



STEP ACTION

9. Determine which transport portal NFS is using:

system> options nfs.tcp

What is the status of NFS running over TCP? ________

system> options nfs.udp

What is the status of NFS running over UDP? ________

10. Determine the NFS version running:

system> options nfs.v3What is the status of NFS running the v3 protocol? ________

system> options nfs.v4What is the status of NFS running the v4 protocol? ________

What is the status of NFS running the v2 protocol? ________

How can you tell? ________

11. Task complete.

TASK 2: ADD AN ADMIN HOST BY WAY OF THE SETUPCOMMAND

In this task, you will configure your storage systems admin host setting with your assigned UNIX or LINUX ho

This will allow your UNIX or LINUX host to mount the root volume of your storage system so that you can

configure the storage system.

STEP ACTION

1. Establish a console connection to the storage system by way of the terminal server and execute the

setupcommand.Enter the following highlighted information when prompted:

NOTE:Your output may differ depending on the hardware you are utilizing.

system> setup

The setup command will rewrite the /etc/rc, /etc/exports,/etc/hosts, /etc/hosts.equiv, /etc/dgateways, /etc/nsswitch.conf,

and /etc/resolv.conf files, saving the original contents of thesefiles in .bak files (e.g. /etc/exports.bak).

Are you sure you want to continue? [yes]

Enter Yes or Return to start the wizard.


18/209



STEP ACTION

2. Press Enter to accept the default value for the following questions:

Please enter the new hostname [system]:

Do you want to configure interface groups? [n]:

Please enter the IP address for Network Interface e0a[10.254.134.35]:

Please enter the netmask for Network Interface e0a [255.255.252.0]:

Should interface e0a take over a partner IP address duringfailover? [n]:

Please enter media type for e0a {100tx-fd, tp-fd, 100tx, tp, auto(10/100/1000)} [auto]:

Please enter flow control for e0a {none, receive, send, full}[full]:

Do you want e0a to support jumbo frames? [n]:

Please enter the IP address for Network Interface e0b []:

Should interface e0b take over a partner IP address duringfailover? [n]:

Please enter the IP address for Network Interface e0c []:

Should interface e0c take over a partner IP address duringfailover? [n]:

Please enter the IP address for Network Interface e0d []:

Should interface e0d take over a partner IP address duringfailover? [n]:

Would you like to continue setup through the web interface? [n]:

Please enter the name or IP address of the default gateway[10.254.132.1]:

3. The admin host questions are next. Enter the name of your UNIX or LINUX machine and then enter

its primary IP address:

The administration host is given root access to the filer's /etcfiles for system administration. To allow /etc root access to allNFS clients enter RETURN below.

Please enter the name or IP address of the administration host:LINUX_VM

Please enter the IP address for LINUX_VM: XXX.XXX.XXX.XXX


19/209



STEP ACTION

4. Continue through the wizard by pressing Enter for the remainder of the questions:

Please enter timezone [GMT]:

Where is the filer located? [Classroom]:

Do you want to run DNS resolver? [y]:Please enter DNS domain name [development.netappu.com]:

You may enter up to 3 nameservers

Please enter the IP address for first nameserver [216.240.23.25]:

Do you want another nameserver? [y]:

Please enter the IP address for alternate nameserver[10.254.132.10]:

Do you want another nameserver? [n]:

Do you want to run NIS client? [n]:The Shelf Alternate Control Path Management process provides the ability

to recover from certain SAS shelf module failures and provides a level of

availability that is higher than systems not using the Alternate ControlPath Management process.

Do you want to configure the Shelf Alternate Control PathManagement interface for SAS shelves [n]:

5. Now, lets reboot the storage system to make our changes take effect.

NOTE: Because we only added the admin host setting, we dont really need to reboot. If this was a

production storage system, you might make the change take effect without rebooting by using the

sourcecommand.

system> reboot

The setupcommand automatically updates the following files:

/etc/exports allowing the admin host to mount the root volume.

/etc/hosts.equiv allowing the admin host to be trusted on the storage

system (allows rshcommands).

/etc/hosts allowing IP resolution of the admin host.

options admin.host which displays the name of the admin host that was provided during

the setupcommand. If volumes are automatically exported (a feature described later inthe course), this setting determines who should receive access to the server-generated

export.

We will now explore these changes.

6. After the reboot, log in to your storage system. What volumes exist on your storage system?

______________________

Which command did you use to discover the volumes?_______________


20/209



STEP ACTION

7. List the content of the/etc/exportsfile in the space provided:

HINT:There is a command-line interface command, but you might be able to do it another way.

If you issued a command-line interface command, what command did you run?_____________

How do you list what exports are presently in memory? __________________

Remember this file was populated during the storage systems setup.

8. Record the IP address and hostname for each entry in the/etc/hostsfile as follows:

Host1:

IP Address:

9. List the content of the /etc/rc file in the space provided:

HINT:Again, there might be more than one way to accomplish this.

The /etc/rc file sets up interfaces and loads exports, as well as other configurations, during boot upof the storage system. You modify the /etc/rc file by running setupbut you can modify it directly.

The /etc/rc file is only executed at boot up. To execute any modification to the /etc/rc, use thesourcecommand.

system> source /etc/rc

This executed the /etc/rc file again.

To learn more about the sourcecommand, see the manual (man) page.

system>man source

10. Task complete.

END OF EXERCISE


21/209

E4-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts


MODULE 4: EXPORTS AND MOUNTS

EXERCISE

OVERVIEW

This lab allows you to practice what you learned in class regarding file sharing. You will create volumes, qtrees

and files. The volumes, qtrees, and files will be exported on the storage system and mounted to a mountpoint on

the NFS client. It is assumed that you are familiar with the exportfs, mount, mkdir, and cdcommands. If

not, refer to the lecture notes during this lab exercise.

OBJECTIVES


Mount the root volume of the storage system on an admin host Export a volume using the command-line interface

Rename a volume and verify the automatic export

Export and mount a qtree Export to a subnet

Export to a netgroup Export a qtree using NetApp System Manager

Mount an export from an admin host

TIME ESTIMATE

60 minutes


22/209



EXERCISE 4: EXPORTS AND MOUNTS

In this exercise, you will create new resources, export them to various targets and mount them from an NFS clie

START OF EXERCISE

TASK 1: MOUNT THE ROOT VOLUME OF THE STORAGE SYSTEM ON AN ADMIN HOST

In the previous exercise, you configured a UNIX or LINUX host as an admin host. Now, mount the root volumeyou can modify configuration files from the admin host.

STEP ACTION

1. Launch NetApp System Manager and navigate to:

Storage > Shared Folders > Exports

2. Notice that the root volume is exported by default just like you observed from the command-line

interface in the previous exercise.

2. Log in to your UNIX or LINUX machine with a PuTTY client.

NOTE: Your UNIX or LINUX machine might use SSH. Check with your instructor if you have any

questions.

3. Create a mountpoint using the name of your assigned storage system.

#mkdir /mnt/

Replace with the name of your storage system.

Create a vol0 directory under /mnt/:

#mkdir /mnt//vol0


23/209



STEP ACTION

4. Mount /vol/vol0 to this mountpoint.

#mount :/vol/vol0/mnt//vol0

5. Change the directory to the mountpoint and list the contents.

# cd /mnt//vol0# ls la

What are the contents of the directory? _____

6. Notice that under /mnt//vol0 there is an etc directory.

Is this the etc directory for your local UNIX host or your storage system?_________

There is also an etc directory under /. Is this the etc directory for your local host or your storage

system? ____________

NOTE: It is easy to get them confused and to modify the wrong system.

7. Task complete.

TASK 2: EXPORT A VOLUME USING THE COMMAND-LINE INTERFACE

In this task, you will create a new aggregate and volume and verify the volume was exported automatically.

STEP ACTION

1. Examine the contents of the /etc/exports file with the rdfilecommand.

system> rdfile /etc/exports

Compare the output from above with the output from using the exportfscommand.

system> exportfs

What is the difference between the outputs?

2. Create an aggregate and a flexible volume with the following commands:

The following command will create an aggregate with three disks with a single parity disk.

system> aggr create aggr1 t raid4 3

The following command will create a flexible volume called NFStest:

system> vol create NFStest aggr1 10g


24/209



STEP ACTION

3. Verify the volume is created and exported using the rdfileand exportfscommands:

system> rdfile /etc/exports

Using the exportfscommand, verify the volume is exported:

system> exportfs

What option allows a newly created volume to be exported automatically?

HINT: Look at system> options nfs

4. Note the access permission for the exported volume and record it here:

5. Task complete.

TASK 3: RENAME A VOLUME AND VERIFY THE AUTOMATIC EXPORT

In this task, you will rename a volume that was automatically exported and verify the export after the renaming

operation. Then you will mount the newly renamed volume from a host.

STEP ACTION

1. At the storage system command-line interface, rename the volume from NFStest to NFSvol:

system> vol rename NFStest NFSvol

2. At the storage system command-line interface, view the exported file systems:

system> exportfs

Notice that the /etc/exports file has been modified and that the exports have been automatically

updated.

3. Create a mountpoint on the UNIX host and mount the volume:

#mkdir /mnt//NFSvol

#mount :/vol/NFSvol /mnt//NFSvol

Verify the mount operation:

# cd /mnt//NFSvol

# ls

4. Task complete.


25/209



TASK 4: EXPORT AND MOUNT A QTREE

In this task, you will create a qtree. You will then export it by editing the /etc/exports file and then reload the

persisted exports. You will then mount the qtree export.

STEP ACTION

1. At the storage system command-line interface, use the qtree createcommand to create a

qtree named unix_tree on NFSvol:

system> qtree create /vol/NFSvol/unix_tree

2. Verify that the security style is set to UNIX:

system> qtree security /vol/NFSvol/unix_tree unix


26/209



STEP ACTION

3. Let us now export this new qtree. Connect to your UNIX host and edit the /etc/exports file on the

storage system.

Grant access to /vol/NFSvol/unix_tree by adding the following line:

/vol/NFSvol/unix_tree -rw=,root=

To edit the file, you can use vi. If you are not familiar with this technique, refer to the following:

Verify your current location# pwd/mnt/system/vol0

If you are not here, within the vol0 mount point, change your directory to this location.

Change directory into your assigned storage systems etc directory.# cd etc

Run vi on the exports file.# vi exports

Your exports file will now be available in the vieditor and the editor will be in command mode.

Scroll down to the last line.

Type Shift-A, capital A, to append to the end of the line you are currently on.

Enter Returnto move to the next line.

Type in the following line: /vol/NFSvol/unix_tree -rw=,root= replacing the with yourassigned UNIX/LINUX hostname or IP address.

Click the ESCbutton to move out of append mode and back to command mode.

Enter :wqto write the file and quit vi.

Verify your changes using the catcommand.

# cat exports.../vol/NFSvol/unix_tree -rw=host1,root=host1

4. At the storage system command-line interface, run the following command to export the new entry

to memory:

system> exportfs asystem> exportfs


27/209



STEP ACTION

5. Create the following mountpoint on the UNIX host:

#mkdir /mnt//unix_tree

6. Mount the new export:

#mount :/vol/NFSvol/unix_tree /mnt//unix_tree

Verify unix_tree is mounted from the storage system:

# mount

7. Change your current directory to the new mountpoint:

# cd /mnt//unix_tree# touch unix_file

Verify that you created a new file with the touchcommand:

# ls l

8. Task complete.

TASK 5: EXPORT TO A SUBNET

In this task, you will export a resource to a subnet.

STEP ACTION

1. Create the following qtree:

system> qtree create /vol/NFSvol/subnet


28/209



STEP ACTION

2. Export this qtree to the subnet. Use the subnet address of the current training environment in one of

the following ways:

/vol/NFSvol/subnet -rw=/24,root=/24

or

/vol/NFSvol/subnet -rw=,root=

NOTE: Use your assigned UNIX hosts IP address and the correct subnet mask.

For example:/vol/NFSvol/subnet -rw=10.10.10.0/24,root=10.10.10.0/24

or

/vol/NFSvol/subnet -rw=10.10.10.0 255.255.255.0, root=10.10.10.0255.255.255.0

Export the file system after editing the /etc/exports file.

3. Mount the subnet qtree to the following location: /mnt//subnet

#mkdir /mnt//subnet#mount :/vol/NFSvol/subnet /mnt//subnet

Change the directory to the mountpoint and create a file namedsubnet_file using the touch

command.

4. Task complete.


29/209



TASK 6: EXPORT TO A NETGROUP

In this task, you will identify targets and resources, create the/etc/netgroupfile, create the/etc/nsswitch.conf fil

and verify content of the/etc/rmtaband/etc/hostsfiles.

STEP ACTION

1. Verify the existence of the netgroupfile from the host with thelscommand or from the storage

system with the rdfilecommand.

From the admin host:

# cd /mnt//vol0/etc# ls l net*#more netgroup

From the storage system:

system> rdfile /etc/netgroup

Does the file exist? ________________________________________

If no, what error message did you receive? ______________________

NOTE:If it doesnt exist, we will have to create it.


30/209



STEP ACTION

2. Use a UNIX or LINUX host or the wrfilecommand to create three groups.

The groups are: trustedhosts, untrustedhosts, and allhosts. Add your assigned UNIX admin host to

the trustedhost group and create other dummy hosts for the untrustedhosts. Place the trustedhosts

and untrustedhosts in the allhosts folder. See the WRFILE METHOD below for an example.

VI METHOD:

From the UNIX host:

# cd /mnt//vol0/etc# vi netgroup

Use the WRFILE METHOD for the correct data.

WRFILE METHOD

From the storage system command-line interface, use the wrfilecommand to create the netgroup

file.

system>wrfile /etc/netgroup

Enter the following netgroups:

trustedhosts (adminhost,,) (name_of_your_station,,)untrustedhosts (host1,,) (host2,,)allhosts trustedhosts untrustedhosts

(Make sure to press Enter after the last line.)

Press Ctrl-C to save entries

NOTE:Disregard the error message generated; this message will always appear.

CAUTION:Use the wrfilecommand sparingly. If available, use vieditor or other equivalentcommands instead.

Verify your entries with the rdfilecommand again:

system> rdfile /etc/netgroup

NOTE:It may take up to 60 seconds for modifications of the netgroup file to take effect.

3. The rmtabfile records a list of all the hosts mounted the storage system since boot up.

Check to see if the rmtabfile exists and identify the contents of the file.

# ls l /mnt//vol0/etc/rmtab# more /mnt//vol0/etc/rmtab#more !$

Or, from the storage system:

system> rdfile /etc/rmtab


31/209



STEP ACTION

4. The nsswitch.conffile contains information on the order of the mechanism to resolve

hostname-to-IP, passwords, netgroups, as well as other configurations.

Verify the existence of the nsswitch.conffile on the storage system:# ls l /mnt//vol0/etc/nsswitch.conf

#more !$

Or, from the storage system, use the rdfilecommand to verify the existence of the nsswitch.conf

file:

system> rdfile /etc/nsswitch.conf

5. Using the rdfile command, view the contents of the/etc/hostsfile:

system> rdfile /etc/hosts

What is the output of this command?

____________________________________________________

____________________________________________________

Make sure your assigned UNIX host is on the list.

6. Create a qtree in the NFSvolvolume named netgroupA.

7. Export netgroupAto the trusted targets (the netgroup trustedhosts) with rwpermissions.

8.Mount the netgroupAqtree to the following location /mnt//netgroupA (where

is the name of your storage system).

9. Change the directory to the mountpoint and create a file named netgroup_file.

You have successfully exported a resource to a netgroup.

10. Task complete.

TASK 7: EXPORT A QTREE USING NETAPP SYSTEM MANAGER

In this task, you will export a qtree using NetApp System Manager and change the logical name of the export.

STEP ACTION

1. Using System Manager, create a qtree by navigating to Storage> Qtrees.

Click Createbutton within the main windows.


32/209



STEP ACTION

2. Add the following infromation to the Create Qtree window:

Name: readTree

Volume: NFSVol

Enable oplocks: [unchecked]

Securtiy Style: unix

Click the Createbutton to create the new qtree.

3. Now, let us create an export for this new qtree.

Click Storage> Shared Folders > Exports.

4. Click Createto start the Create Share and Export wizard.

Click Next.

5. Within the Shared Folder Location, click Browse and the Browse For Folder dialog should appear.

Expand aggr1and the select NFSvol. Select the readTree folder.

Verify that the folder path to export is /vol/NFSvol/readTreeand click OK.

6. Click Next in the Shared Folder Location.

The Share Protocols dialog appears.

NOTE:We only have NFS licensed currently, so only NFS exports are only available.

Change the Export Name to /readTree.

Click Next.


33/209



STEP ACTION

7. In the NFS Permissions dialog, change the default permissions by selecting the current default and

clicking Edit.

Within Edit Host Permissions, change the permissions for All hoststo AllowRead-Only.

Click OK.

8. Verify the permissions.

Click Next.

9. Review the Share Summary dialog and click Next.


11. Observe you new export under Storage > Shared Folders > Exports.

12. Task complete.

TASK 8: MOUNT AN EXPORT FROM AN ADMIN HOST

In this task, you will mount the export created earlier in this exercise.

STEP ACTION

1. Establish a PuTTY session to the admin host and create a directory for your storage system.

2. Create the readTreedirectory under the system_namedirectory:

# mkdir /mnt//readTree


34/209



STEP ACTION

3. Mount the storage systems root volume to the directory you just created and view the contents.

When mounting the root volume, use the storage system nameor IP address.

# mount :/readTree /mnt//readTree

# cd /mnt//readTree

4. You should now be able to view the directory structure of your storage systems root volume.

# ls al/mnt//readTree

How does this compare with the local clients root?

(Hint# ls al /)

_______________________________________________

5. Try to create a file at the root of the storage system:# touch foo

Was it successful? ______________________

6. Task complete.

END OF EXERCISE


35/209

E5-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Overview


MODULE 5: CIFS OVERVIEW

EXERCISE

OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment.

OBJECTIVES


Identify the hardware available in your exercise configuration

TIME ESTIMATE

15 minutes


36/209



EXERCISE 5: CIFS OVERVIEW

The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment with th

assistance of your instructor.

START OF EXERCISE


This task familiarizes you with the exercise environment you will use for all exercises in this course.

STEP ACTION


Windows Server

NOTE:This machine might be a virtual machine.

ALSO NOTE:When login into the Windows Server, authenticate with the domain.

Name: ______________________________

IP address: _________________________

Domain

Administrator

Password: __________________________

Local

Administrator

Password: __________________________

Domain Controller

Domain Name: _______________________

Controller

IP address: _________________________

DNS: ____________________________

IP address: _________________________


37/209



STEP ACTION

Storage System

Name: ___________________________________

Type: ___________________________________

Internal

IP address: _______________________________

Terminal

IP address: _______________________________

Root

Password: _______________________________

2. Task complete.

END OF EXERCISE


38/209

E6-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups


MODULE 6: CIFS WORKGROUPS

EXERCISE

OVERVIEW

The goal of this lab is to give you an opportunity to configure a storage system for a Windows workgroup

environment. In a future exercise, you will repurpose the storage system for an Active Directory domain

environment.

OBJECTIVES


Configure a storage system for a Windows workgroup environment

Review the results of cifs setupin a Windows workgroup environment

TIME ESTIMATE

30 minutes


39/209



EXERCISE 6: CIFS WORKGROUPS

Windows workgroup is a fast ad-hoc method of associating a group of machines. NetApp storage systems can

participate in this loose association of machines. In this exercise, you will configure your assigned storage syste

to work in a Windows workgroup environment using the command-line interface. We will use NetApp System

Manager when we convert the workgroup configuration to an Active Directory domain.

START OF EXERCISE

TASK 1: CONFIGURE A STORAGE SYSTEM FOR A WINDOWS WORKGROUP ENVIRONMENT

In this task, you will log in to your assigned storage system and configure the CIFS services within Data

ONTAP.

STEP ACTION

1. Open a PuTTY interface to your assigned storage system.

2. Type licenseat the storage systems command prompt to view the current list of licensesregistered.

License CIFS by entering the following command and using the CIFS license code provided by

your instructor:

system> license add xxxxxx

Confirm the license was successfully added by reissuing the licensecommand at the prompt.

3. Before configuring the CIFS services, at the storage system prompt (in your Telnet session), enter

the following command and view the default storage system security style and NT administrator

privileges:

system> options wafl

Look at the wafl.default_security_styleoption.

What is the volume (and all qtrees on the volume) default security style? ______________

Look at the wafl.nt_admin_priv_map_to_rootoption. Does the NT (Windows)

administrator have privileges to map to the UNIX root user? ___________________

4. Enter the following command and view the security style of the root volume:

system> qtree status

What is the security style of your root volume? _________


40/209



STEP ACTION

5. Configure the CIFS services by entering the following command:

system> cifs setup

NOTE: Steps 6 through 13 will assist you in entering the correct parameters.

6. Answer no [n] to WINS.

7. Configure the security style as (2) NTFS-only filer.

NOTE:Normally, if we use both NFS and CIFS on the same storage system you should select (1)

Multiprotocol, but we want to observe the resulting effect on the storage system.

8. Type in a root password and press Enterkey. Repeat.

NOTE:By default, Data ONTAP 8.0 7-Mode requires a harden password. The root password must

be at least 8 characters, 2 alphabetic characters, and 1 number.

9. Press Enterto keep default CIFS server (storage system) name. (Obtain the storage system name

from your instructor.)

10. Choose 3for Windows workgroup authentication using the storage systems local user accounts.

11. Press Enterto keep the default name for the workgroup [WORKGROUP].

12. Answer yes [y] to create the local administrator (system\administrator) account.

13. Enter the password twice for the local administrator password.

NOTE: The name and password for the local administrator on the storage system must match the

Windows workstation administrator and password for pass-through authentication to work.


41/209



STEP ACTION

14. CIFS should now be configured. Verify CIFS configuration using NetApp System Manager by

navigating to:

Configuration > Protocols > CIFS

15. After configuring the CIFS services, enter the following command and view the default storage

system security style and NT administrator privileges:

system> options wafl

What is the volume (and all qtrees on the volume) default security style?___________________

Does the NT (Windows) administrator have automatic privileges to map to the UNIX root user?

_______________

16. Enter the following command and view the security style of the root volume:

system> qtree status

After configuring the CIFS services, what is the security style of your root volume?

__________________

After configuring the CIFS services, what is the security style of your NFSvol volume?

__________________


42/209



STEP ACTION

17. Change NFSvol back to a unixsecurity style using the following command:

system> qtree security /vol/NFSvol unix

Verify:

system>qtree status

18. Task complete.

TASK 2: REVIEW THE RESULTS OF CIFS SETUP IN A WINDOW WORKGROUP ENVIRONMENT

In this task, you will review the files modified during the process of configuring the storage systems CIFS serv

for a Windows Workgroup environment. All commands in the lab are entered at the storage system prompt.

STEP ACTION

1. At the storage system prompt, review the CIFS configuration file with the rdfile command by

typing:

system> rdfile /etc/cifsconfig_setup.cfg

Notice how this file holds all the configurations entered during the wizard questions of the cifs

setup command.

2. At the storage system prompt, review the following files with the rdfile command:

/etc/usermap.cfg /etc/passwd

/etc/nsswitch.conf

/etc/cifsconfig_share.cfg


43/209



STEP ACTION

3. As you recall, cifs setupcreated a local administrator. We will now verify this new user wascreated.

system> useradmin user list administrator

Now, we will verify that this user was added to the lclgroups.cfg file under the

BUILTIN\Administrators group.

system> rdfile /etc/lclgroups.cfg

Notice there is a SID under the BUILTIN\Administrators group. Because the lclgroups.cfg file is a

newly created file, there should only be one SID. Now, lets verify that this SID is the same as the

administrator that we saw with the useradmin command:

system> cifs lookup {copy the SID here}

This SID should resolve to the storage systems local administrator that was created with cifs

setup.

4. Task complete.

END OF EXERCISE


44/209

E7-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Shares and Sessions


MODULE 7: CIFS SHARES AND SESSIONS

EXERCISE

OVERVIEWThe purpose of this activity is to perform routine CIFS administration procedures on your storage system in a

Windows Workgroup environment. You will view the current list of shares, add a new share, verify access to

share, and display session information.

OBJECTIVES


View current shares Create new shares using the command-line interface Verify shares access and display session information

TIME ESTIMATE

15 minutes


45/209



EXERCISE 7: CIFS SHARES AND SESSIONS

Now that your storage system is configured for CIFS, you will view the default shares, add new shares, and acc

the shares.

START OF EXERCISE

TASK 1: VIEW CURRENT SHARES

In this task, you will log in to the storage system and work with the default shares.

STEP ACTION

1. If you are not already logged in, use the Remote Desktop connection to log in to your Windowsworkstation as Administrator.

NOTE: Use the IP address and password provided by the instructor.

2. On your Windows workstation, go toStartRun. In the Run window, enter the following tobrowse the shares on your storage system, and click OK:

\\IP_Address_of _Your_Storage_System

What share(s) display? _________________________

3. In the address bar of the Web browser, change the address to the following:

\\IP_Address_of _Your_Storage_System\C$

What folder(s) display? __________________________

4. At your storage system prompt, view the CIFS sessions by entering the following command:

system> cifs sessions

What user currently has a session with the storage system?

__________________________________________________

What account is the user mapped to? _______________________


46/209



STEP ACTION

5. At the storage system prompt, verify the user mapping by entering the following command:

system> options wafl.nt_admin_priv_map_to_root

Is this option set to on? _________________

Ifwafl.nt_admin_priv_map_to_rootis on, then the local administrators user mapping is

root.

Verify the default UNIX user name by entering the following command:

system> options wafl.default_unix_user

Is there a default UNIX user? If yes, what is the user name?

________________________________

If thewafl.default_unix_useris set to a user name (for example, pcuser), then this is the

default user mapping for any Windows user that is not explicitly mapped.

Verify that the default UNIX user name is in the /etc/passwd file by entering the following

command:

system> rdfile /etc/passwd

Is the default UNIX user name in the /etc/passwd file? _____________

6. Task complete.

TASK 2: CREATE A NEW SHARE USING THE COMMAND-LINE INTERFACE

In this task, you will create a new share using the command-line interface.

STEP ACTION

1. At your storage system prompt, create a qtree named wintreein NFSvol:

system> qtree create /vol/NFSvol/wintree

Normally, a qtree created in NFSvol would be a unixsecurity type because it would inherit the

security style from its containing volume. NOTE: We will discuss security styles in the next

module. For now, change the security style to ntfsby entering:

system> qtree security /vol/NFSvol/wintree ntfs

2. Create a new share called winshare (for the qtree wintree) on the storage system by entering thefollowing command at the storage system prompt:

system> cifs shares add winshare /vol/NFSvol/wintree

Answer yesif you are asked whether you want to use this share name.


47/209



STEP ACTION

3. View the newly created winshare share by entering the following command at the storage systemprompt:

system> cifs shares winshare

Which group has access to this share? _______________________What are the share permissions? _______________________

4. Task complete.

TASK 3: VERIFY SHARE ACCESS AND DISPLAY SESSION INFORMATION

In this task, you access the new share that you created previously and check the session information.

STEP ACTION

1. On the Windows Server, open Windows Explorerand, as the administrator, map a network driveto the new share winshare.

NOTE: Depending on the environment, you might want to create a share using the storage systems

IP address instead of the hostname.

2. After mapping the network drive to winshare in Windows Explorer:

a) Right-click the winshare share mapping and choose Properties.

b) Click the Securitytab and view the NTFS file permissions.

3. On the Windows workstation, create a text file with WordPad and save the file to the new sharewinshare.

a) Go to Start> Programs> Accessories> WordPad.

b) Open WordPad and type something to create a text document.

c) Save the file to the winshare share.

4. On the Windows workstation using Windows Explorer, go to the mapped network drive for thewinshare share to view the newly created text file:

a) Right-click the text file and choose Properties.

b) Click the Securitytab and view the NTFS file permissions for the text file.

c) What group has access to this file? ____________________________

List the file access permissions for the text file:__________________

d) Close all the open windows.


48/209



STEP ACTION

5. At the storage system prompt, view the CIFS sessions by entering the following command:


From your Windows workstation, who has a session with the storage system?

__________________________________________________

6. Task complete.

END OF EXERCISE


49/209

E8-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control


MODULE 8: CIFS ACCESS CONTROL

EXERCISE

OVERVIEW

The purpose of this activity is to perform routine CIFS administration procedures on your storage system in aWindows workgroup environment. You will create a local user account and administer user access, add a newshare, map a network drive to the new share and verify access to the share, and create a local group.

OBJECTIVES


Add a new local user account and configure user access Access a network drive and work with access control Create a local group

TIME ESTIMATE

30 minutes


50/209



EXERCISE 8: CIFS ACCESS CONTROL

Currently, the storage systems CIFS service is configured in a Windows Workgroup mode. We will create a louser account and configure local access control.

START OF EXERCISE

TASK 1: ADD A NEW LOCAL USER ACCOUNT AND CONFIGURE USER ACCESS

In this task, you will create a local user account on your storage system. All commands in the lab are entered at storage system prompt.

STEP ACTION

1. Verify that you have a PuTTY session with your assigned storage system.

2. Recall that the storage system currently is in a Windows workgroup. To verify that the storagesystem is a server in a Windows workgroup, enter the following command:


Is the storage system in a Windows workgroup? ________________

3. Before adding a local user to the storage system, check the current security options to determinepassword rules by entering the following command:

system> options security

What is the value for the security.passwd.rules.enable? _________

If the security.passwd.rules.enableoption is on, then in order to create a local user,

you will need to come up with a password using the following rules:

It must be at least eight characters long

It must contain at least two alphabetic characters It must contain at least one digit

If security.passwd.rules.enable.optionis off, then the restrictions will not be

enforced when you create a password.

4. Add a local user (your name) in the predefined Guests group to the storage system by entering thefollowing command:

User names are case insensitive.

system> useradmin user add your_nameg Guests

Remember your password._________________________

5. Verify that the local user (you) was added to the storage system by entering the followingcommand:

system> useradmin user list your_name

What are the capabilities of your new local user?

_______________________________________________


51/209



STEP ACTION

6. Check the allowed capabilities for the local administrator account by entering the followingcommand:

system> useradmin user list administratorWhat are the capabilities of the local administrator?_______________________________________________

7. View the list of all local storage system users by entering the following command:

system> useradmin user list

What local users are listed? _____________________________________

8. Task complete.

TASK 2: ACCESS A NETWORK DRIVE AND WORK WITH ACCESS CONTROL

In this task, you will map a network drive to a share. Recall that in a Windows workgroup, user authentication iperformed locally on the storage system.

STEP ACTION

1. On your assigned Windows server, map a drive to a storage system share \\IP_Address_of_Your_Storage_System\C$.

2. At the storage system prompt in your Telnet session, view the CIFS sessions by entering thefollowing command:


Who has a session with the storage system?

__________________________________________________

You logged in to the Windows as Administrator with a password. This Administrator wasauthenticated locally on the storage system with the local Administrator account (note that the usernames match). The local Administrator account has the same password as the WindowsAdministrator.

This is called pass-through user authentication, and it works only if the names and passwords

match on both the storage system and Windows workstation.The Administrator account has permission to view the hidden C$ share.

3. On the Windows workstation, open Windows Explorerand disconnect all network drives attachedto your storage system.


52/209



STEP ACTION

4. On the Windows workstation, log off as the Administrator and then log back in as the Administratorto clear the share cache.

a) Go to Start > Log Off administrator and click the Log offbutton when you are askedif you are sure that you want to log off.

b) Use the Remote Desktop connection to log back in to your Windows workstation as theAdministrator with the Administrator password.

5. On your Windows workstation, map a drive to a storage system share for a different local user (yourname) by opening Windows Explorerand click Map network drive. The Map Network Drivewindow appears.

a) In the Drivelist box, select any unused letter.

b) In the Folderlist box, enter the following:

\\IP_Address_of _Your_Storage_System\C$

c) Click Connect using a different credentials.d) Click Finish.

e) The Windows Security window appears.

Enter your User name.(Name_of _Your_Storage_System \your_name).

f) Enter your Password. (password for your_name).

g) Click the OKbutton.

h) Click the Finishbutton.

i) The Connect to window appears.

j) The user name matchesName_of _Your_Storage_System \your_name.

k) In the passwordtext box, enter your password.

l) Click the OKbutton.

Are you able to connect to C$ share? _____________________

If not, go to Step 5 b), and in the Folderlist box, enter \\IP_Address_of_Your_Storage_System\Homeand proceed again to map the network drive to the share.

The Guests group has no capabilities and, therefore, you cannot access the C$ share, but you canaccess the Home share because it is available to the Everyonegroup.


53/209



STEP ACTION

6. At the storage system prompt, view the CIFS sessions by entering the following command:


From your Windows workstation, who has a session with the storage system?

__________________________________________________

7. Task complete.

TASK 3: CREATE A LOCAL GROUP

In this task, you will create a new local group on your storage system.

STEP ACTION

1. Before creating a new local group on your storage system, view the current groups on the storagesystem by entering the following command at the storage system prompt:

system> useradmin group list

2. At the storage system prompt, create a local group on the storage system called friends with theData ONTAP predefined role power by entering the following command:

system> useradmin group add friends r power

3. At the storage system prompt, verify the newly created group by entering the following command:

system> useradmin group list friends

How many capabilities are assigned to the power role for the friends group?__________________________


54/209



STEP ACTION

4. On the Windows workstation, change the security properties of the text file on the winshare share.

a) Open Windows Explorerand go to the mapped winshare drive to view the text file.

b) Right-click the text file and choose Properties.

c) Select the Securitytab and under Group or user names, click Editand then click the Addbutton.

d) In the Enter the object names to select textbox, enter friends.

e) Click the OKbutton.

f) Click the friendsgroup. What permissions are displayed for the friends group?_____________________________

g) Click the Everyonegroup. How do the friends permissions differ from the permissions inthe Everyone group? ___________________________________________________

h) Now, click the Applybutton on the Securitytab, and then click the OKbutton. Click theOKbutton.

5. At the storage system prompt, modify the local user (your name) and add the friends group to theuser by entering the following command:

system> useradmin user modify your_nameg Guests,friends

6. At the storage system prompt, verify the groups and capabilities of the newly changed local user(your name) by entering the following command:

system> useradmin user list your_name

To which groups does the local user (your name) now belong?________________

Have the local user (your name) capabilities changed? If yes, how?

________________________________________________

7. Task complete.

END OF EXERCISE


55/209

E9-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Domains


MODULE 9: CIFS DOMAINS

EXERCISE

OVERVIEW

The purpose of this activity is to reconfigure the storage systems CIFS server for an Active Directoryenvironment. You will then create a domain user, create shares, and administrate those shares.

OBJECTIVES


Terminate CIFS services using NetApp System Manager Configure DNS using NetApp System Manager Configure the time services using NetApp System Manager Reconfigure the CIFS services using NetApp System Manager Create a 32-bit aggregate using NetApp System Manager

Create a volume using NetApp System Manager Create shares and manage the permissions of the shares Create a domain user

Create a share with Computer Management Map shares to drive letters

Display CIFS sessions

TIME ESTIMATE

60 minutes


56/209



EXERCISE 9: CIFS DOMAINS

Up to now, you have worked with Data ONTAP CIFS services in the Workgroup mode. But most Windowsenvironments use Microsoft Active Directory technology, which centralizes all resources in a Windows domaIn this exercise, you will reconfigure your storage system for a Windows domain environment.

START OF EXERCISE

TASK 1: TERMINATE CIFS SERVICES USING NETAPP SYSTEM MANAGER

In this task, you will terminate CIFS services using NetApp System Manager.

STEP ACTION

1. Open up NetApp System Manager and navigate to:

Configuration > Protocols > CIFS

2. On the Configuration tab of the CIFS configuration window, click theStopbutton to terminate allCIFS sessions and shut down the CIFS services.

Click Stopto accept this action.

3. Verify that the CIFS services status is stopped.

4. Task complete.


57/209



TASK 2: CONFIGURE DNS WITH NETAPP SYSTEM MANAGER

In this task, you will configure your assigned storage systems DNS service using NetApp System Manager.

STEP ACTION

1. From the left pane, click the appropriate storage system to display a subtree of managementfeatures.

2. Click Configuration> Network> DNS.

3. Click theEditbutton.

Verify that DNS is enabled with the appropriate nameserver(s) for your environment. If not, checkthe Enable DNS.

Add the DNS domain namethat is appropriate in your environment.

Type in the server IPaddress of your first DNS and click Add. Repeat for the number of DNSservers that you have in your environment.

4. Task complete.

TASK 3: CONFIGURE THE TIME SERVICES WITH NETAPP SYSTEM MANAGER

In this task, you will configure your assigned storage systems time services using NetApp System Manager.

STEP ACTION

1. From the left pane, click the appropriate storage system to display a subtree of managementfeatures.

2. Click Configuration> System Tools> Date/Time/Timezone. Click Edit.


58/209



STEP ACTION

3.

Set the time zone to be the same as your Domain Controller.

Either set the time manually or point it to a SNTP server that is linked with your Domain Controller.

NOTE:This could be your domain controller if configured.Click OKwhen finished.

4. Task complete.

TASK 4: RECONFIGURE THE CIFS SERVICES USING NETAPP SYSTEM MANAGER

In this task, you will reconfigure the CIFS services using NetApp System Manager to join your storage system tWindows Active Directory domain.

STEP ACTION

1. Go to Protocols>CIFSwithin System Manager.

Click Set upto start the CIFS Setup wizard.


59/209



STEP ACTION

2. Because you have previously configured the CIFS services, you are presented with a warningmessage:

Click the OK to stop CIFS serviceduring setupcheck box and click Next.

3. We are using both NFS and CIFS on this storage system so within the Security Style dialog, checkthe security style as Multiprotocol.

Click Next.

4. We will connect this storage system to an Active Directory domain.

Verify that the Active Directory radio button is selected and click Next.

5. Enter the domain name and domain administrators credentials as provided by your instructor.

Click Next.

6. Keep the default Name of the system and do not enter any WINS server addresses.Click Next.

7. Review the CIFS Setup Summary.

Click Next.

8. Verify that CIFS Setup Wizard was successful and Click Finish.

9. Review the Configurationtab within NetApp System Manager.

10. Review the Domaintab within NetApp System Manager.

11. Task complete.


60/209



TASK 5: CREATE A 32-BIT AGGREGATE USING NETAPP SYSTEM MANAGER

In this task, you will create a 32-bit aggregate using NetApp System Manager.

STEP ACTION

1. Using NetApp System Manager, from the console tree, click the appropriate storage system todisplay a subtree of management features.

2. Click Storage> Aggregates.

3. Click Createto start the Create Aggregate wizard.

4. Type or select information as requested by the wizard.

Aggregate Name: aggr2

RAID Type: RAID 4

Disk selection: Allow system to select disks automatically based on the required aggregate size

Disk Type: FCAL or SAS

Maximum size: [unchecked]

ClickNext.

5. In the Aggregate Size page, create an aggregate with three disks.

Click Next.

6. Verify the settings are correct in the Aggregate Summary page and click Next.

7. After the wizard completes successfully, click Finish.

8. Verify that the aggregate you created is included in the list of aggregates in the Aggregate window.

9. This aggregate has three disks. Is the available space two-thirds of the total disk space? Explainwhy or why not.

_____________________________

10. Task complete.


61/209



TASK 6: CREATE A VOLUME USING NETAPP SYSTEM MANAGER

In this task, you will create a new flexible volume in the aggr1 aggregate using NetApp System Manager.

STEP ACTION

1. From the console tree, click the appropriate storage system to display a subtree of managementfeatures.

2. Click Storage > Volumesto display the Volumes window.

3. Click Createto display the Create Volume dialog box.

4. Add the following information:

Name: NASvol

Storage type: NAS

Aggregate: aggr2

Select the size of a volume. Although flexible volumes can grow as needed, you will want to start

with a reasonable size. For our lab environment, 10 GB (tiny in a real-life scenario) will work fine.NOTE:Your instructor may modify this value to a smaller volume size for simulated environments.

Leave the default Snapshot reserve at 20%.

Click Createto add your new volume.

5. What is the amount of space available for data? ______________________

6. Task complete.

TASK 7: CREATE SHARES AND MANAGE THE PERMISSIONS OF THE SHARES

In this task, you will display all the current shares, sessions, local groups, and users on your storage system usinNetApp System Manager.

STEP ACTION

1. View the shares on the storage system by entering the following command:

system> cifs shares

or within NetApp System Manager at Storage> Shared Folders> Shares/Exports.


62/209



STEP ACTION

2. Create a qtree named cifs_tree1in NASvol and change security to ntfsusing NetApp SystemManager:

a. Navigate to Storage> Qtrees

b. Click Create

c. Within the Create Qtree dialog, enter the following:

Name: cifs_tree1

Volume: NASvol

Enable oplocks: [checked]

Security style: NTFS

Click the Createbutton.

3. Within NetApp System Manager, navigate to Storage> Shared Folders> Shares/Exports.

4. Notice the default shares created. Explore the C$ share by clicking Edit when the C$ share ishighlighted.

Observe the default Share permissions for this share by looking at the Share permission tab.

Click Cancelto close the Edit C$ setting dialog.

5. Click Createon top of the main panel.

The Create Share and Export Wizard should appear.

Click Next.


63/209



STEP ACTION

6. Click Browseand navigate until you see the cifs_tree1 folder.

Select it and click OK. Back in the Shared Folder Location, click Next.

7. This qtree will be used only for CIFS access so we will uncheck NFS but otherwise accept thedefaults.

Click Next.

8. Review the Share Summary and click Next.


Notice the new share within the list.

10. Task complete.


64/209



TASK 8: CREATE A DOMAIN USER

In this task, you will configure Microsofts Server Manager to administer Active Directory credentials and creat

domain user.

STEP ACTION

1. If you have not done so before now, log in to your assigned Windows Server using the domain

administrators account. If your assigned Windows Server is not on the Active Directory domain,add it to your Windows domain.

To verify or add the Windows Server to the domain, click Start> Control Panel> System and

Security> System. The current status of the Windows Server is found in the Computer name,

domain, and workgroup settings section. To add your machine, click the Change Settings.

2. Next, we need to install the Remote Server Administration Tools feature within Server Manager.

Open Server Manager by clicking the Server Manager icon next to the Start button.

Server Manager should appear.


65/209

E9-11 Accelerated NCDA

146595429 NetApp NCDA Exercise Guide 2

Documents

Transcript of 146595429 NetApp NCDA Exercise Guide 2