Northeastern IT LLC - Forums

Hi all,

Posting this in case it helps others who run into the same frustrating issue.

**Problem:** linuxmint.com was completely unreachable on one specific Windows laptop, while every other device on the same network (same subnet, same gateway, same public IP) could access it fine. No block page ...

Site to Site VPN and OSPF appear to have issues with 24.03 and the "Firewall State Policy"

I needed to change this back to the "old" way of doing things with "Floating States"

Once I selected this and cleared my state tables (a reboot would also work for this) everything appeared to be working ...

Recently I've been seeing an alarming number of Malaysia based SFPs 1783-SFP1GSX / A having a failure. These SFP's were purchased during the pandemic and it's a wonder if there was some kind of poor quality control during this time.

Googling around I've also seen some similar articles

https ...

At a IOS component you sometimes want a sequentially ordered interfaces in a cisco stack. A switch in a stack can not be un-provisioned or re-provisioned, so removing and adding a physical switch in a running Stack does not work. It generates following syslog message:

%Switch can not be un ...

Stratix Port SPAN / monitor - Wireshark

Content
This example shows how to set up a SPAN session (session 1) for monitoring source port traffic to a destination port. First, any existing SPAN configuration for session 1 is cleared and then bidirectional traffic is mirrored from source port 1 to ...

aaa new-model
!
!TACACS+ server configuration
!
tacacs server SERVER1
address ipv4 <IPADDRESS SERVER1>
key <PASSWORD>
single-connection
timeout 3
!
tacacs server SERVER2
address ipv4 <IPADDRESS SERVER2>
key <PASSWORD>
single-connection
timeout 3
!

aaa group server tacacs+ TACACS
server ...

swtich#
swtich# archive download-sw /overwrite tftp://X.X.X.X/s5400-universalk9-tar.152-8.E1.tar

Example: (showing a Stratix 5400)

switch#
switch# archive download-sw /overwrite tftp://10.101.245.254/s5400-universalk9-tar.152-8.E1.tar

Rockwell Automation Firmware Download Site Link:

5400 ...

snmp-server group <GROUP NAME> v3 priv access snmp-<GROUP>
snmp-server user <user> <group> v3 auth sha <PASSWORD> priv aes 128 <PRIV-PASSWORD>

ip access-list standard snmp-<GROUP>
permit X.X.X.X (where the X.X.X.X is the IP address of the server that will be monitoring the switch)

Switch# copy running-config tftp://<IPADDRESSS>
<enter>
<enter>
exit

Example:
SWITCH-1#copy running-config tftp://10.101.245.254
Address or name of remote host [10.101.245.254]?
Destination filename [SWITCH-1-confg]?
!!
17180 bytes copied in 0.934 secs (18394 bytes/sec)

Rescan SCSI BUS:

for host in `ls /sys/class/scsi_host/`;do echo "- - -" >/sys/class/scsi_host/${host}/scan; done

fdisk -l
Disk /dev/sdb : 400 GiB, 429496729600 bytes, 838860800 sectors
Disk model: Virtual disk
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 ...

https://dl.dell.com/content/docu100454

You can disable the Secure Negotiate option by using PowerShell on a Windows Server 2012 or Windows 8 client. To do this, run the following command:

Powershell> Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" RequireSecureNegotiate -Value 0 -Force ...

When creating/changing a snapshot policy, be mindful of the storage impact of that policy. For example, taking hourly snapshots of a share with a high rate of change, and retaining those snapshots for a long time, will consume a a lot of disk space.

Log into Web interface of Isilon
Determine ...

Provide the below procedures to the end user:

CIFS Procedure
Open the folder that contained the files you wish to restore. For example, my_folder is the name of the directory.

Right-click any open area in the window, and select "Properties" from the context menu.

Select the "Previous ...

isi status (general overview of cluster)
isi_gather_info (isilon equivalent of an autosupport, gathers all the logs and config and FTP to isilon support)

isi_gather_info -T /<path> (if /ifs is marked read-only this will allow you to bypass)

isi zone zones list (list all access zones)

**many ...

#Logon on to the isilon via SSH using putty:

#Change the directory -

cd /ifs/data/Isilon_Support/

mkdir SR<#>

#Run the following command to dump TCP (Packet Capture), ensure the SR <#> below matches the above created directory.

isi_for_array 'for i in `ifconfig | grep -B2 ether | grep flags ...

Diagnose:

Cause for policy errors are recorded in /var/log/isi_migrate log.

For example, once we were pointing to the correct DNS/Smartconnect target name, the next error indicating why the policy failed was:

"Primary authentication fails"

Here is the link to the KB for resolving that policy ...

Update: run the above a, b, c, d, and skip log gathers as we know this is a bug in the isilon 7.x firmware

This is one of those cases where we would need to have had debug logging, and packet captures, to reproduce and "catch" the issue in the act. In the future, I strongly recommend allowing ...

cat /etc/likewise-krb5-ad.conf

should contain dns_lookup_realm = false

if this isn't there,

vi /etc/likewise-krb5-ad.conf

add:
dns_lookup_realm = false

Note: this could be resolved in a later version of OneFS. At the time this was relevant to 7.x and 8.x

RUN NOTES
=========
# Log onto the GUI for isilon (https://ipaddress:8080) using root/ password

# Go to the NFS Share to edit the exports
## click on "PROTOCOLS" tab then "UNIX Sharing (NFS)"
## Find the share you want to edit and click on the right side where it says "View Details"
## For read ...

RUN NOTES
=========
Storage Work
------------
# ssh to <ISILON> as root
cd /ifs/<directory>
mkdir <share-name>

### if share needs replication ###
# ssh to <REPLICA ISILON> as root
cd /ifs/<directory>
mkdir <share-name>
### end if share needs replication ###

# Log onto the GUI for isilon ...

Isilon OneFS must be 7.1 or higher

(Source) isi sync policies list

--> Displays a list of Policies on the isilon. Find the Policy in Ref to your share.

i.e.

isilon1-1# isi sync policies list
Name Path Action Enabled Target ...

isilon cluster

isilon1-1# isi license status
Module License Status Configuration Expiration Date
------ -------------- ------------- ---------------
CloudPools Inactive Not Configured
HDFS Inactive Not Configured
InsightIQ Activated Not Configured
Isilon for vCenter Inactive Not Configured ...

# ssh to <prod isilon> as root
cd /ifs/<domain>/<share-name>
mkdir <share-name>

### if share needs replication ###
# ssh to <replica isilon> as root
cd /ifs/<domain>/<share-name>
mkdir <share-name>
### end if share needs replication ###

# Log onto the GUI for isilon (https://ipaddress ...

Procedure

IMPORTANT!
This procedure does not work if your cluster is in SmartLock compliance mode. The compadmin user does not have privileged access to run the rm commands described in the procedure.

NOTE
If the /var partition is full, new CELOG database files cannot be created and the procedure ...

Procedure
1. Open an SSH connection to any node in the cluster using the root account.

2. If you want to preserve the original files, make a copy of all files listed in Step 4 before proceeding.

3. Disable the CELOG service and make sure that you see that this was done:

Cluster-1# isi ...

Issue
When you connect to a SmartConnect zone, you receive a "not found" error or the connection times out.

You have installed SmartConnect according to the configuration guide. This means that you have:

Run the isi smartconnect wizard and configured a SmartConnect zone
Created a delegated zone on ...

isi auth settings krb5 modify --default-realm=YOURDOMAIN.COM
isi auth settings krb5 view

might also need:

isi auth settings krb5 modify --dns-lookup-realm=false

isi_gconfig registry.Services.lsass.Parameters.Providers.ActiveDirectory.Instance.Default=YOURDOMAIN.COM

net.inet.tcp.ecn.enable is a setting allow to incoming TCP connections to negotiate ECN while outgoing connections don't request ECN. Always requesting ECN on outgoing connections can be troublesome because of the number of broken middle-boxes that block ECN connections (though we do have a fallback ...

Reference: https://www.dell.com/support/kbdoc/en-us/000126272/understanding-powerscale-onefs-locking-deadlocks-and-hangdumps
From Dell:

As a clustered file system, PowerScale OneFS provides a mechanism to coordinate operations that happen on separate nodes. The OneFS Distributed Lock Manager (DLM ...

Monitoring Clusters

show-clusters - Displays the connected clusters’ information.
show-clusters-info - Displays the connected clusters’ information.
show-clusters-upgrade - Displays the clusters’ upgrade status.
show-clusters-upgrade-progress - Displays indicators of the clusters’ software ...

inode increases formula

Code: Select all


total size in KB, / 32, = X,
X*0.30= Y,
X+Y is our max

echo; echo "****************** START ******************"; echo; echo ">> Any Locking?:"; echo 483388 : How to resolve cluster Deadlocking issue. https://support.emc.com/kb/483388; echo; isi_for_array -X 'sysctl efs.lin.lock.initiator.oldest_waiter | grep -E "address|started"' | grep -v "exited ...

for myzone in `isi zone list | grep ifs |awk '{print$1}'`
do echo "=========================================" $myzone
for export_id in `isi nfs exports list --zone=$myzone | grep $myzone | awk '{print$1}'`
do echo -n "========= export ID: " $export_id " "
isi nfs exports view --zone=$myzone ...

uname -a|awk '{print $1,$2,$4}'; isi_for_array -s "isi_hw_status|grep SerNo"; isi_for_array -s isi_radish -a /dev/ad*|egrep 'SN:|Percent Life'|grep -v Used|sed -e 's/Percent Life Remaining:/PercentLifeRemaining %/' -e 's/Percent Lifetime Left:/PercentLifeRemaining %/' -e 's/is .*//'|awk '{print ...

create a file: /ifs/data/Isilon_Support/emcbilling.sh

today=`date +%Y-%m-%d_%H-%M-%S`
host=`hostname | rev | cut -c3- | rev`
guid=`python -c "import isi.config.arrcfg as ac;cfg = ac.config_load(); print cfg.guid"`

echo " " > /ifs/data/Isilon_Support/emc_billing/NodeIsiSnapshotsView.txt
echo ...

Show statistics of SMB2 and NFS connections on isilon

CLUSTER# isi statistics query current list --nodes=all --keys=node.clientstats.active.smb2,node.clientstats.active.nfs
Node node.clientstats.active.smb2 node.clientstats.active.nfs ...

Came across this one day at work when our Isilon clusters could not display CIFS shares. Seems we decommed domain controllers that are "stored" in this file. After moving the file and killing services CIFS shares were available.

isi_for_array 'mv /var/lib/likewise/krb5-affinity.conf /tmp/'

isi ...

Northeastern IT LLC - Forums

Search found 38 matches

linuxmint.com was unreachable from multiple browsers on m windows laptop....

pfSense - Plus 24.03 / CE 2.80 - Firewall State Policy Changes.

Malaysia based SFPs 1783-SFP1GSX / A

Cisco Swtich Stack - Renumber Swtich

SPAN / Port Monitor / Wireshark Stratix Switchport for Wireshark Packet Capture

TACACS config for Stratix

Upgrade Firmware on Stratix Swtich via TFTP

Setup SNMP v3

Backup Switch via TFTP Server

Add disk and create new volume group and logical volume

OneFS 9.1 PowerScale CLI Guide

Disable "Secure Negotiate" on the client

Creating a New SnapshotIQ Snapshot Schedule/Policy

Isilon Restore Snapshot

General Troubleshooting Commands

Isilon TCPdump Packet Capture

Isilon Sync (fix broken sync jobs)

ISILON SMB failures, service restarts, remediation steps

SMB CIFS Bug - Enumerating Domains in forest

NFS Share (add client to export)

NFS Share Create

Isilon DR Drill Test

Disable iSCSI

Isilon CIFS Share Create

Isilon - Clear celog 7.x

Isilon - Clear celog 8.x

Isilon OneFS: Timeout or "not found" error when connecting to the SmartConnect zone

modify KRB default-realm

Isilon ECN TCP connections - slow network performance across site-to-site vpn

Isilon Event Coherency Issue - Isilon Deadlock, locking, hangdumps

CLI Commands

inode increases

Isilon Performance Data Collection Script

Check NFS exports for hosts that don't resolve anymore

Check remaining life on Isilon Boot Drives

EMC Isilon Billing Script

Show statistics of SMB2 and NFS connections on isilon

KRB5 Affinity File - Isilon cant connect to cifs shares.