0% found this document useful (0 votes)
58 views

Lab Guide - PowerScale Administration

save

Uploaded by

Ladislau
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
58 views

Lab Guide - PowerScale Administration

save

Uploaded by

Ladislau
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 377

LAB GUIDE -

POWERSCALE
ADMINISTRATION
Version [1]

LAB GUIDE

INSTRUCTOR GUIDE
Internal Use - Confidential
Dell Confidential and Proprietary

Copyright © 2020 Dell Inc. or its subsidiaries. All Rights Reserved. Dell, EMC and other
trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be
trademarks of their respective owners.

Lab Guide - PowerScale Administration

Internal Use - Confidential


© Copyright 2020 Dell Inc. Page i
Table of Contents

Exploring the Lab Environment ................................................................................ 2


Introduction to PowerScale ..................................................................................... 11
Adding Nodes to the Cluster ................................................................................... 20
Using CLI commands .............................................................................................. 29
Designing a OneFS Directory Structure................................................................. 38
NTP ............................................................................................................................ 43
Authentication Providers ........................................................................................ 50
Configuring Access Zones ...................................................................................... 59
Configuring SmartConnect ..................................................................................... 66
RBAC and ZRBAC .................................................................................................... 84
On-disk Identity ...................................................................................................... 107
Permissions............................................................................................................ 114
SMB Shares ............................................................................................................ 129
NFS Exports ........................................................................................................... 147
S3............................................................................................................................. 163
HTTP - Optional ...................................................................................................... 178
Data Protection and File Layout ........................................................................... 187
SmartPools ............................................................................................................. 213
File Pool Policies ................................................................................................... 222
File Filtering ............................................................................................................ 237
SmartQuotas .......................................................................................................... 243
SmartDedupe .......................................................................................................... 270
SnapshotIQ ............................................................................................................. 285
SyncIQ..................................................................................................................... 305
SmartLock .............................................................................................................. 321

Lab Guide - PowerScale Administration

Page ii © Copyright 2020 Dell Inc.


HealthCheck ........................................................................................................... 332
Monitoring .............................................................................................................. 342

Lab Guide - PowerScale Administration

Internal Use - Confidential


© Copyright 2020 Dell Inc. Page iii
Exploring the Lab Environment

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 1
Exploring the Lab Environment

Exploring the Lab Environment

Connect to the Lab Environment

In this lab, you perform the following tasks:


• Review the lab scenario and topology
• Review the lab guide structure
• Login to the lab environment

Login to the Lab Environment


To login to the Virtual Learning Platform (VLP) lab environment, follow these steps.
Use the VLP to complete the lab exercises. If you are in a classroom, use your
personal computer or a student computer. If you are taking the course online, you
may also use your home computer.

1. The On-Demand version of the PowerScale Administration is associated with


an On-Demand Lab to reinforce the content. Click here to register for the On-
Demand Lab(https://education.dellemc.com/content/emc/en-
us/csw.html?id=933227881).

NOTE: This step is only applicable to the On-Demand PowerScale


Administration course.

2. Launch the Chrome browser, and then go to


http://edulab.emc.com/emcedu/catalogs/

Note: Chrome is the preferred browser and delivers the best experience. If
you do not have Chrome, you can use the browser of your choice.

3. If you are in an Instructor-led in-class or an online course, login using the


credentials that your instructor provided.

Lab Guide - PowerScale Administration

Page 2 © Copyright 2020 Dell Inc.


Exploring the Lab Environment

4. Under the enrollments tab, click on Start This Lab.

5. A Welcome video opens, providing a lab orientation. If this is the first time you
are using the VLP, view the video. If the video does not automatically play, in
the upper right corner of your browser, click Help > Tips to review the EduLab
Orientation Video. The orientation video shows you how to deploy the lab,
access the console, and view the lab guide.

6. To learn more about the VLP, watch the EduLab Orientation video mentioned
in the previous step.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 3
Exploring the Lab Environment

Instructor Note: Ensure that all the students are able to access the
VLP, assist if otherwise.

Lab Guide - PowerScale Administration

Page 4 © Copyright 2020 Dell Inc.


Exploring the Lab Environment

Lab Scenario and Topology


Boston Media Corporation (BMC) is an organization that provides newspapers,
periodicals, and online streaming news. BMC has acquired a new PowerScale
cluster to help handle their storage growth while maintaining current staffing levels.
The name of the cluster is boston. There are currently seven IT employees in the
organization.

You are John and have worked at BMC for just over a month and have been
assigned the storage administrator for the cluster. Based on your storage
experiences, you acknowledge that the configuration and day-to-day maintenance
of storage infrastructure is complex and may require several administrators to
manage it effectively.

The IT manager has told you the previous NAS platform had challenges with
scaling the storage. Those systems were limited by their single file system
(namespace) size (16TB typical). BMC will need namespace capabilities of a much
larger scale and the ability to quickly adjust to unexpected growth as their customer
base expands.

The cluster has been racked, stacked, powered, and added to DNS. The IT
manager along with senior storage administrators have put together the necessary
documentation and steps required to configure the cluster. As a part of the team,
configure the cluster based on the documentation and record your progress using
the lab exercises. The initial implementation is targeted for three business units in
the BMC organization: Sales, Engineering and Marketing.

Your goal is to implement the PowerScale cluster so that the users from each
business unit can access the data. Once done, you will configure services
such as snapshots and quotas on the data.

1. In this course, you have a dedicated lab environment which includes:

• Jumpstation: Windows 2012 client

• Centos: CentOS client

• DC: Windows 2012 - DC/DNS

• InsightIQ

• DataIQ v1

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 5
Exploring the Lab Environment

• Six node cluster

Note that for usability purposes, the password for ALL systems is
Dees12345!

Note that the URL for the PowerScale WebUI used throughout this lab is
https://192.168.3.11:8080, the IP address for node-1. You can manage the
cluster through any active cluster node by using the IP address of that node.

Lab Guide - PowerScale Administration

Page 6 © Copyright 2020 Dell Inc.


Exploring the Lab Environment

Lab Guide Structure


The lab guide and lab exercises are presented in a skills-based structure. You can
perform the typical lab exercise in one of three ways: PEQ-based, WebUI step-by-
step instructions, and CLI step-by-step instructions.

Although most lab exercises are broken down into the three methods, not all lab
exercises can be strictly accomplished using only the WebUI or only the CLI. Some
of the lab exercises will not have a skills-based structure.

• PEQ-based: This method is intended for individuals with some PowerScale


administration experience or for those who want a challenging lab expierence.
PEQ stands for Pre Engagement Qualifier and contains only the information
needed to configure the system. For the PEQ-based implementation, you are
only given the information needed to complete the task, not the configuration
steps needed.
• WebUI step-by-step: This method leads you through the configuration by
detailing each step using the PowerScale WebUI. The exercises show
screenshots of expected field entries and outcomes. Typically, there is very
little, if any, command line used in this method.
• CLI step-by-step: This method leads you through the configuration by detailing
each step using the OneFS CLI. The exercise shows screenshots of commands
and the expected outputs. Typically, there is very little interaction with the GUI.
Some task such as configuring Windows DNS entries and mapping shares will
use the GUI.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 7
Exploring the Lab Environment

Lab Guide Layout


1. You can use the lab to complete the exercises in one of three methods; the
PEQ, WebUI, or CLI. Each exercise begins with a short scenario and a few
objectives.

a. The first page of the lab exercise is the PEQ. If you are experienced
or if you prefer a more challenging experience, try using the PEQ
method.

Lab Guide - PowerScale Administration

Page 8 © Copyright 2020 Dell Inc.


Exploring the Lab Environment

b. Following the PEQ pages are the step-by-step instructions for the
WebUI. Remember, you do not have to use this method if you are
configuring using the PEQ or CLI method.

c. Lastly, you can choose to configure using the CLI method.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 9
Exploring the Lab Environment

Lab Guide - PowerScale Administration

Page 10 © Copyright 2020 Dell Inc.


Introduction to PowerScale

Introduction to PowerScale

Scenario:

With the Implementation Engineer onsite, watch the Implementation Engineer run
the Configuration Wizard.

Your 4-node cluster is ready. Each node is named boston-<#>. Next, you will
verify that you can connect to the cluster via the OneFS WebUI and the CLI. Once
connected, check the basic health of the cluster and the available storage space.

For the introduction to the PowerScale, there is no skills-based exercises. You will
perform each task in a step-by-step manner.

In this lab, you perform the following tasks:


• Observe initial implementation
• Access the cluster using the WebUI
• Access the cluster using the CLI

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 11
Introduction to PowerScale

Initial Configuration Video


1. Link to the video:
https://edutube.emc.com/Player.aspx?vno=zyK3csP1f1h6F0cke3Ivog==&auto
play=true

Lab Guide - PowerScale Administration

Page 12 © Copyright 2020 Dell Inc.


Introduction to PowerScale

Access the Cluster using the WebUI


1. In the VLP, launch the Jumpstation and login as user DEES\John and
password Dees12345!

a. From the Jumpstation, launch a Chrome browser and navigate to


https://192.168.3.11:8080. This is the external IP address and port
for node-1 of the cluster. If you get the prompt about the connection
privacy, click Advanced and then click Proceed to <IP> (unsafe).

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 13
Introduction to PowerScale

2. Login to the WebUI for your new PowerScale cluster. Click on the Log in
button after entering the following credentials:

a. User name: root

b. Password: Dees12345!

3. On the Dashboard menu, the Cluster status tab is shown as default. You
may see failed events in the New event groups table. You can ignore the
events for the purposes of this lab.

4. Scroll down to the Status table. In the Status table, mouse over the icon in the
Status column for nodes with ID 1,2,3 and 4 to see their status description.

Lab Guide - PowerScale Administration

Page 14 © Copyright 2020 Dell Inc.


Introduction to PowerScale

Note: A node may have a status other than healthy (green) because of the
number of installed drives. Healthy status is not required for the purposes of
these lab exercises.

5. For your documentation, write down the IP address of each node.

TIP: You can click the ID number of each node to go to the Node status page.

a. Node 1 IP:

b. Node 2 IP:

c. Node 3 IP:

d. Node 4 IP:

Instructor Note: Prompt the students to find and view the IP address
for each node.

6. Examine the Cluster size chart presented in the Cluster Status tab and note
the available hard disk space. Check the chart to see the growth of available
space as you add additional nodes to your cluster.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 15
Introduction to PowerScale

Note: The lab image used does not reflect capacities you will see on a
production system.

Question: What is the current HDD capacity available?

7. Minimize the browser.

Lab Guide - PowerScale Administration

Page 16 © Copyright 2020 Dell Inc.


Introduction to PowerScale

Access the Cluster using the CLI


1. Launch the mRemoteNG application. mRemoteNG is the application that you
will use to SSH into the cluster.

Tip: Click the shortcut on the desktop or select from the task bar.

2. Start an SSH session to node 1 by double clicking Bos-node1. If you get a


PuTTY Security Alert, click Yes.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 17
Introduction to PowerScale

3. Login as root, press ENTER, then type the password Dees12345! and press
ENTER. Note the PowerScale OneFS version for your documentation.

4. According to the Implementation Engineer, the first thing you should always do
when getting to the CLI is to check the health of the cluster. To display
information about the cluster’s status, at the boston-1 prompt, press ENTER
after typing the isi status command.

Tip: Use pipe to more (| more) or to less (| less) to prevent from needing
to scroll to view the output. Use the spacebar to forward the output. The less
command is a more powerful version of more. When reading through large
text files, the less command loads each page into memory a page at a time,
making it more efficient.

Tip: You can also use the isi stat command, which has identical output.
Remember, all commands are case sensitive.

Lab Guide - PowerScale Administration

Page 18 © Copyright 2020 Dell Inc.


Introduction to PowerScale

5. Notice that the health of the cluster and the nodes is OK. Also, note the initial
available storage size with just the first four nodes in the cluster. The numbers
on your virtual cluster may not match the screenshots exactly but the location
of the information, and where you should look, will match the highlighted fields
in the screenshots throughout this document.

Question: What is the avail capacity for the cluster? How does this compare
to what the WebUI reported?

Instructor Note: The WebUI and CLI report the same storage
capacity.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 19
Adding Nodes to the Cluster

Adding Nodes to the Cluster

Scenario:

Now that you have validated the initial cluster build, you need to add the two
remaining nodes to the cluster. You have been given the procedures for how to do
this using the CLI and the WebUI.

The objective of the lab is to add two nodes to the cluster. If needed, use the
WebUI or the CLI step-by-step walk through portion of the exercise for guidance.

In this lab, you perform the following tasks:


• Add a cluster node using the Configuration Wizard.
• Add a cluster node using the WebUI.

Lab Guide - PowerScale Administration

Page 20 © Copyright 2020 Dell Inc.


Adding Nodes to the Cluster

Add Nodes to the Cluster


Add the nodes to the cluster using the Configuration Wizard and the WebUI. Verify
the nodes that are added.

1. Use the following information to join nodes:

a. Add one of the two remaining nodes to the cluster using the
Configuration Wizard. Open the node that you want to add from the
console.

i. Join the node to the existing boston cluster.

b. Add the remaining node to the cluster using the WebUI.

i. WebUI page: Cluster Management, Hardware


Configuration.

ii. Add the remaining node to the existing boston cluster.

Hint: In the WebUI, the node you want to add is identified by


its serial number.

c. Verify that the nodes are added to the cluster.

Hint: Browse the Dashboard menu options in the WebUI.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 21
Adding Nodes to the Cluster

CLI Step-by-Step Walk Through: Add Nodes


1. From the VLP environment, open the Console for the fifth node in the cluster
by clicking Node 5 in console and then click inside the pane to activate the CLI
of the node. The Console tab is located at the upper left corner of the VLP.

2. Since this node is not part of the cluster, you will see the Configuration Wizard
as shown:

3. To join Node 5 to the boston cluster using the Configuration Wizard, perform
the following actions:

a. At the Wizard prompt, type 2 and press Enter to join the node to an
existing cluster.

b. In Join cluster prompt, type 1 and press Enter to join Node 5 to the
boston cluster.

Note: This process may take a few minutes due to the nature of the
virtual environment.

4. Verify that the node as been added.

Lab Guide - PowerScale Administration

Page 22 © Copyright 2020 Dell Inc.


Adding Nodes to the Cluster

a. On the Jumpstation, login as DEES\John (password: Dees12345!).


Open mRemoteNG from the taskbar. Select Bos-node1, and SSH
using root/Dees12345!

b. At the boston-1 prompt, run the isi status command to verify that
node 5 has joined the cluster. Node 5 appears at the bottom of the list
with ID set to 5.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 23
Adding Nodes to the Cluster

WebUI Step-by-Step Walk Through: Add Nodes


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to Cluster management, Hardware Configuration. Click Add a


node.

3. The Add node to cluster window shows the nodes available to add. There
will be one node displayed. When multiple nodes are available, there is no way
to distinguish node order prior to adding them to the cluster. In a production,
real world implementation, when adding multiple nodes into a cluster, ensure
to get the serial number off the back of the node. You can join nodes to the
cluster in the order you want to join them, or the order they appear in the rack.

a. Select the node and then click Add node. The node joins the cluster.

Lab Guide - PowerScale Administration

Page 24 © Copyright 2020 Dell Inc.


Adding Nodes to the Cluster

Note: Do not add another node to the cluster until the first node is joined because
the nodes may join out of order and break your sequential IP numbering.

4. Now verify that the node is added, go back to the Dashboard, Cluster
overview page of the WebUI. On the Cluster status tab, confirm that the
node is added to the cluster. You may need to refresh the screen or click on
another option if the virtual environment is not responding.

a. On the Dashboard, verify Node 6 appears at the bottom of the list


with ID set to 6. Wait until node shows green before going to the next
step.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 25
Adding Nodes to the Cluster

b. View the Node status of Node 6 by clicking the node ID in the cluster
status tab. Notice that the node is assigned the next IP address (ext-
1) from the configuration range so that the IP addresses are
sequential. The configuration range was created when the
Implementation Engineer initially set up the cluster.

Note: If the Status column is red, wait a minute or two for the node to
finish joining. The status turns green and the values populate once
the node fully joins the cluster.

Lab Guide - PowerScale Administration

Page 26 © Copyright 2020 Dell Inc.


Adding Nodes to the Cluster

5. On the Cluster management menu, click Events and alerts.

a. Under Event Groups, look at the list of event notifications along with
the level in the Severity. If there are issues with the cluster or events
that you should be aware of, the Severity will be Warning or Critical.
You may not have any events such as those shown in the graphic.
The graphic shows event you may see because of the virtual
environment. Check the box at the top of the ID column to select all
the events.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 27
Adding Nodes to the Cluster

b. From the Select an action drop-down list, select Mark resolved. On


the confirmation dialog box, click Mark resolved. This resolves the
event, and you will not be notified again unless a new event occurs.

Lab Guide - PowerScale Administration

Page 28 © Copyright 2020 Dell Inc.


Using CLI commands

Using CLI commands

Scenario:

Now you have a 6 node cluster. Next, you need to validate the configuration of the
newly built cluster. The IT manager has asked you to use specific isi commands
to become familiar with the cluster, understand the hardware layout, and use the
built-in help options. OneFS relies on the backend network to communicate across
the nodes, so take a moment to see how this works.

This lab explores the OneFS isi command structure and syntax. You will perform
each task in a step-by-step manner.

In this lab, you perform the following tasks:


• Run isi commands
• Examine cluster hardware
• Use the Configuration console

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 29
Using CLI commands

isi commands
In this task, use the built-in man isi and isi --help, to view the commands
and command structure.

1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open


mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. To view the isi command structure with all of its subcommands and options,
at the boston-1 prompt, press ENTER after typing the isi --help or isi -
h command.

Tip: You must use the vertical scroll bar to view the entire content.
Alternatively, typing a pipe | and the word more (| more) is a common
addition to commands with a lot of output. | more enables you to view the
output one page at a time. Press ENTER to view more of the output.

3. Pick one of the commands from the output and type it at the prompt. For
example: isi job or isi sync and see what type of output or assistance
you get. Shown in the graphic is the output for running the isi ntp
command.

Lab Guide - PowerScale Administration

Page 30 © Copyright 2020 Dell Inc.


Using CLI commands

Tip: To view a basic description of any command and its available options,
type -h or --help option after the command and press ENTER. For
example: isi ntp --help

4. To view a detailed description of the isi command, subcommands and


options, at the boston-1 prompt, press ENTER after typing the man isi
command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 31
Using CLI commands

Tip: Type q to exit from the man command and return to the boston-1 prompt.

5. The tab complete is a useful command line feature that can auto-fill partially
typed commands, file names, options, paths, subcommands and more. To
perform tab complete, press TAB while typing a command and notice that it
will autocomplete the command you are typing or suggest options.

Instructor Note: Demonstrate the use of the tab complete feature for
autocomplete and option suggestions.

Lab Guide - PowerScale Administration

Page 32 © Copyright 2020 Dell Inc.


Using CLI commands

Examine Cluster Hardware


In this task, you use isi commands to examine the cluster hardware.

1. To view the hard drives for node 1, at the boston-1 prompt, press ENTER
after typing the isi devices drive list | grep dev command.

Note: The use of | grep in the command. The addition to the command
enables you to view only the output fields with the word "dev". Running the
command without grep will output many lines that show an EMPTY bay. Try
running without using | grep.

The output shows HEALTHY drives in node 1. Also, the JOURNAL drive in
the first drive bay is required because this virtual cluster does not have an
internal SSD to store it.

a. To view the journal drive for all nodes, run the isi_for_array isi
device drive list | grep -w da1 command. The grep -w
switch is used to find an exact match. Similarly, you can view all the
drives for all nodes by running the isi_for_array isi device
drive list | grep dev command.

2. To get the list of subcommands for statistics, at the boston-1 prompt, press
ENTER after typing the isi statistics --help command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 33
Using CLI commands

3. To view all the drives on this virtual node, at the boston-1 prompt, press
ENTER after typing the isi statistics drive | more command. Notice
in the output that there is a single SSD and the rest are SAS and UNKNOWN
drives. You can use grep to filter only what you want.

Note: grep'ing the Drive string in the command is to display the header. The -
e is used to display multiple strings.

4. To view the hardware in every bay, you can run isi devices for all six
nodes in the cluster. At the boston-1 prompt, press ENTER after typing the
isi_for_array 'isi devices drive list' | grep -ie Lnn -e
dev | more command.

Lab Guide - PowerScale Administration

Page 34 © Copyright 2020 Dell Inc.


Using CLI commands

Note the use of | grep and | more in the command. The string Lnn is used
to output the header. Try the isi_for_array 'isi devices drive
list' command without piping.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 35
Using CLI commands

The Configuration Console


Now, use the Configuration console (also known as config subsystem) command to
view the internal int-a, int-b and failover networks. You know you are in the
Configuration console because the command prompt changes to boston >>>.

1. In the mRemoteNG window, open the Configuration console. Press ENTER


after typing the isi config command.

Note: You can only run the console commands while in the Configuration
console. You must leave the Configuration console to run any other cluster
command.

2. To list the documented commands available in the console, press ENTER


after typing the help command.

Tip: You do not need to type isi before commands while in the Configuration
console.

3. To view options for the interface command, press ENTER after typing the
help interface command.

Question: What are the two valid interfaces shown in the output?

Instructor Note: int-a and int-b

4. To view the internal networks on the cluster, press ENTER after typing the
interface command.

Lab Guide - PowerScale Administration

Page 36 © Copyright 2020 Dell Inc.


Using CLI commands

5. To view the configuration table with the network information for int-a and int-b,
press ENTER after typing the status command.

Question: What is the number of allocated IP address and the number of free
IP addresses available on the cluster?

Instructor Note: 6 and 3

6. Exit the Configuration console. Press ENTER after typing the exit command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 37
Designing a OneFS Directory Structure

Designing a OneFS Directory Structure

Scenario:

The first thing to configure is the directory structure. The three BMC business units
to access the boston cluster are sales, engineering, and marketing. In this
exercise you will create a unique base directory structure for the engineering and
marketing business units. You will create the sales base directory as part of
another exercise.

Given in the lab exercise is the information needed to create the base directories. If
needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Create the OneFS base directories for the engineering and marketing business
units

Instructor Note: Instruct students to use either the objective


information, the WebUI step-by-step, or the CLI step-by-step method.

Lab Guide - PowerScale Administration

Page 38 © Copyright 2020 Dell Inc.


Designing a OneFS Directory Structure

Base Directories
In this task, you will create two of the three required base directories. Note that you
will create the sales directory is a later lab exercise.

1. Use the following information to configure the base directories:

a. To configure the base directories, use the WebUI, File system


explorer page or the standard mkdir UNIX command.

i. Base directory name: engineering

ii. Base directory path: /ifs/engineering

iii. Base directory name: marketing

iv. Base directory path: /ifs/marketing

b. Verify that the base directories have been created by either looking
into the File system explorer page or by using the ls command.

Question: Is there a difference in default permissions when creating the base


directory using the WebUI and the CLI?

Instructor Note: Yes. The WebUI default is 777 whereas the CLI is
755.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 39
Designing a OneFS Directory Structure

WebUI Step-by-Step Walk Through: Create Base Directories


In this task, you will create two of the three required base directories. Note that you
will create the sales directory is a later lab exercise.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the File System, File system explorer page.

a. Engineering base directory: Select Create a directory. Enter


Directory name as engineering, and keep the default user, group,
and permissions. Click Create directory.

b. Verify that the /ifs/engineering base directory is shown in the


File system explorer page.

Lab Guide - PowerScale Administration

Page 40 © Copyright 2020 Dell Inc.


Designing a OneFS Directory Structure

c. Marketing base directory: Select Create a directory. Enter Directory


name as marketing, and keep the default user, group, and
permissions. Click Create directory

d. Verify that the /ifs/marketing base directory is shown in the File


system explorer page.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 41
Designing a OneFS Directory Structure

CLI Step-by-Step Walk Through: Create Base Directories


In this task, you will create two of the three required base directories. Note that you
will create the sales directory is a later lab exercise.

1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open


mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

a. Run the pwd command to view the present working directory.

b. Run the mkdir /ifs/engineering command.

c. Run the mkdir /ifs/marketing command.

d. Run the ls -la /ifs command and verify the base directory is
present.

Lab Guide - PowerScale Administration

Page 42 © Copyright 2020 Dell Inc.


NTP

NTP

Scenario:

Your goal is to provide user access to the cluster. Now that you have a 6-node
cluster, you need to synchronize all the cluster nodes to the same time source.
Time synchronization is critical for cluster functionality.

The IT manager has instructed you to synchronize the cluster’s Network Time
Protocol (NTP) services with the dees.lab Active Directory server. Time
synchronization is your first step to access management, you need to
configure the date and time reported by the cluster.

Given in the lab exercise is the information needed to configure NTP. If needed,
use the WebUI or the CLI step-by-step walk through portion of the exercise for
guidance.

In this lab, you perform the following tasks:


• Configure the NTP services

Instructor Note: Instruct students to use either the objective


information, the WebUI step-by-step, or the CLI step-by-step method.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 43
NTP

NTP
The Active Directory domain controller is on the Windows Server 2012R2 VM. This
VM is designated as the time server that the cluster will sync its time to.
Authentication will fail if the cluster time is more than 5 minutes off from the AD
domain controller.

1. Use the following information to configure NTP on the cluster:

a. NTP can be configured using the WebUI General settings page or


the isi ntp servers command.

i. NTP server IP Address: 192.168.3.2

b. Verify that the date, time, and timezone on the nodes is the same as
that on the domain controller. Change the timezone if they do not
match. To change the time and timezone on the nodes, navigate to
the Date & Time tab on the General settings page of the WebUI.

i. Timezone: America/New_York - EDT

Lab Guide - PowerScale Administration

Page 44 © Copyright 2020 Dell Inc.


NTP

WebUI Step-by-Step Walk Through: NTP


The Active Directory domain controller is on the Windows Server 2012R2 VM, and
has an IP address of 192.168.3.2. You will designate this as the time server that
the cluster will sync its time to because authentication will fail if the cluster time is
more than 5 minutes off from the AD domain controller.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the Cluster management, General settings page, and then click
the NTP tab.

a. In the NTP Servers field, enter 192.168.3.2, and then click Save
Changes. The server with IP address 192.168.3.2 is the time server
that you want to synchronize the cluster to. The IP address of the
NTP server that you have added is displayed on the NTP Servers
field.

3. Select the Date and time tab. Compare the node’s Date and Time and Time

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 45
NTP

Zone to the system time on the DC server and the Jumpstation. You will
need to launch the DC console and login as administrator/Dees12345!.
Notice that the node time is in 24-hour format.

a. Change the cluster time if the DC time zone is different from the time
zone set on the nodes. Use the Time zone drop-down list to
configure the cluster time and time zone to match the DC server
using 24-hour format. No matter where you are in the world, set the
time zone to America/New_York - EDT.

Lab Guide - PowerScale Administration

Page 46 © Copyright 2020 Dell Inc.


NTP

b. Click Save changes if you have made any changes.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 47
NTP

CLI Step-by-Step Walk Through: NTP


The Active Directory domain controller is on the Windows Server 2012R2 VM, and
has an IP address of 192.168.3.2. You will designate this as the time server that
the cluster will sync its time to because authentication will fail if the cluster time is
more than 5 minutes off from the AD domain controller.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open


mRemoteNG, and SSH to any node using root/Dees12345!

2. At the boston-1 prompt, run the isi ntp servers create 192.168.3.2
command to add the NTP server. To verify that the server has been added,
run the isi ntp servers list command, and you will see the server
listed as shown below:

3. Verify that the date, time and timezone on the nodes are the same as that on
the DC server. You will need to launch the DC console and login as
administrator/Dees12345! Notice that the node time is in 24-hour format.

a. To check the date, time and timezone on the nodes, open the
Configuration console by running the isi config command at the
boston-1 prompt. Notice that the prompt changes to boston>>>

i. To check the current date and time, run the date at the
boston>>> prompt. Similarly, run the timezone command to
check the timezone set on the nodes. Verify that the timezone
is set to Eastern Time Zone as shown below.

Lab Guide - PowerScale Administration

Page 48 © Copyright 2020 Dell Inc.


NTP

ii. If the timezone on the DC server and the nodes do not match,
change the timezone on the nodes by running the timezone
Eastern Time Zone command at the boston>>> prompt.
Run the commit command to save changes.

b. To exit the Configuration console, run the exit command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 49
Authentication Providers

Authentication Providers

Scenario:

BMC uses a mix of NFS and SMB clients. The next step for achieving client access
is to configure your cluster to use both LDAP and Active Directory services to
authenticate clients. OneFS best practice is to always connect LDAP first before
joining the cluster to an AD domain. To complete the cluster authentication setup,
join the cluster to Active Directory (AD).

Given in the lab exercise is the information needed to configure the Authentication
Providers. If needed, use the WebUI or the CLI step-by-step walk through portion
of the exercise for guidance.

In this lab, you perform the following tasks:


• Connect to the LDAP server
• Join Active Directory

Instructor Note: Instruct students to use either the objective


information, the WebUI step-by-step, or the CLI step-by-step method.

Lab Guide - PowerScale Administration

Page 50 © Copyright 2020 Dell Inc.


Authentication Providers

Authentication Providers
Configure LDAP and Active Directory.

1. Use the following information to configure your cluster to use LDAP for
authentication:

a. To configure the LDAP provider you can use the WebUI


Authentication providers page or the isi auth ldap command.

i. LDAP Provider Name: Isilon-LDAP

ii. Server URIs: ldap://centos

iii. Base distinguished name (DN): dc=dees and dc=lab

Hint: Separate the two DN using a comma. It does not matter if


there are spaces or no spaces after each comma.

iv. Groupnet: groupnet0

2. Use the following information to configure Active Directory for the cluster:

a. Before configuring Active Directory, ensure that the time on the nodes
and time on the Jumpstation has a time difference of less than five
minutes. You can configure Active Directory using the WebUI,
Authentication providers page or the isi auth ads command.

i. Domain name: dees.lab

ii. User: administrator

iii. Password: Dees12345!

iv. Groupnet: groupnet0

3. Verify that LDAP and Active Directory have been configured.

a. WebUI: View the properties of the System access zone.

b. CLI: Use the isi auth status command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 51
Authentication Providers

WebUI Step-by-Step Walk Through: Connecting to LDAP


Choose to configure a base Distinguished Name (DN) using the WebUI. The base
DN identifies the entry in the directory where LDAP clients begin their search. Base
DNs can include the parameters common name (cn), locality (l), organizational unit
(ou), domain component (dc), and others. An example of a Distinguished Name is:
cn=lab1, dc=isilon, dc=com. It does not matter if there are spaces or no spaces
after each comma.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to Access, Authentication providers, and then click the LDAP tab.
Click Add an LDAP provider.

3. In the Add an LDAP provider window, complete the fields as highlighted in


the graphic and then click Add LDAP provider.

Lab Guide - PowerScale Administration

Page 52 © Copyright 2020 Dell Inc.


Authentication Providers

4. To verify that the LDAP provider has been added, go to the LDAP tab, in the
LDAP providers table, ensure the new LDAP provider is listed and that it has
a green dot in the Status column as shown below.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 53
Authentication Providers

CLI Step-by-Step Walk Through: Connecting to LDAP


Choose to configure a base Distinguished Name (DN) using the CLI. The base DN
identifies the entry in the directory where LDAP clients begin their search. Base
DNs can include the parameters common name (cn), locality (l), organizational unit
(ou), domain component (dc), and others. An example of a Distinguished Name is:
cn=lab1, dc=isilon, dc=com. It does not matter if there are spaces or no spaces
after each comma.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open


mRemoteNG, and SSH to any node using root/Dees12345!

2. To configure LDAP, at the boston-1 prompt, run the isi auth ldap
create Isilon-LDAP --base-dn="dc=dees,dc=lab" --server-
uris="ldap://centos" --groupnet=groupnet0 command.

3. Verify that the LDAP provider has been added.

a. At the boston-1 prompt, run the isi auth status command. This
command shows which providers are currently active on the cluster.
Verify that the LDAP provider created is listed and online.

b. At the boston-1 prompt, run isi auth ldap list to view all the
LDAP providers configured for the cluster.

c. At the boston-1 prompt, run isi auth ldap view Isilon-LDAP


to view the provider details.

4. Query the LDAP server and output the various attributes for users. At the
boston-1 prompt, run the ldapsearch -x -h centos -b
dc=dees,dc=lab command.

Lab Guide - PowerScale Administration

Page 54 © Copyright 2020 Dell Inc.


Authentication Providers

WebUI Step-by-Step Walk Through: Joining Active Directory


Choose to configure Active Directory for the cluster using the WebUI. BMC uses a
Windows 2012R2 domain.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Verify the time on the nodes by navigating to Cluster management, General


settings, Date and time. If there is more than a five minute difference, enter
the current time to match the Jumpstation time using 24-hour format, and
then click Save changes.

3. Navigate to the Access, Authentication providers page, Active Directory


tab. Click Join a domain.

4. On the Join a Domain page, enter the fields highlighted in the graphic and
then click Join.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 55
Authentication Providers

a. Joining the domain may take several minutes. After the cluster
successfully joins the domain, you will get a success notification and
the status should be green in the Active Directory providers table.

Lab Guide - PowerScale Administration

Page 56 © Copyright 2020 Dell Inc.


Authentication Providers

CLI Step-by-Step Walk Through: Joining Active Directory


Choose to configure Active Directory for the cluster using the CLI. BMC uses a
Windows 2012R2 domain.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open


mRemoteNG, and SSH to any node using root/Dees12345!

2. To verify the date and time on the nodes, enter the Configuration console by
running the isi config command at the boston-1 prompt. Run the date
command at the boston>>> prompt. Ensure that the time on the nodes and
the Jumpstation have a time difference of less than five minutes. If not, change
the time at the nodes by running the date YYYY/MM/DD HH:MM:SS
command at the boston>>> prompt. Replace the values for the date and time
in the command. Exit the Configuration console by running the exit
command.

3. To configure Active Directory for the cluster, at the boston-1 prompt, run the
isi auth ads create dees.lab administrator --
password=Dees12345! --groupnet=groupnet0 command.

4. Verify that Active Directory had been configured.

a. At the boston-1 prompt, run the isi auth status command. This
command shows which providers are currently active on the cluster.
Verify that the Active Directory provider that was just created is listed
and online.

b. At the boston-1 prompt, run isi auth ads list to view all the
Active Directory providers configured for the cluster.

c. At the boston-1 prompt, run isi auth ads view dees.lab to


verify that the dees.lab provider is online.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 57
Authentication Providers

5. At the boston-1 prompt, run the isi auth users list --domain dees
command. The output shows the Active Directory users.

Lab Guide - PowerScale Administration

Page 58 © Copyright 2020 Dell Inc.


Configuring Access Zones

Configuring Access Zones

Scenario:

Good progress. You have:

✓ Configured NTP
✓ Configured authentication
✓ Configured two of three base directories

The base directories are the root of each access zone you create. Now you will
create the access zones.

Given in the lab exercise is the information needed to configure your access zones.
If needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this exercise, you will perform the following tasks:


• Create access zones for all three of the BMC business unit

Instructor Note: Instruct students to use either the objective


information, the WebUI step-by-step, or the CLI step-by-step method.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 59
Configuring Access Zones

Access Zones
The intent is to have three BMC organizations in unique authentication zones.
Configure three access zones, one for each BMC business unit that will access the
cluster.

1. Use the following information to configure the access zones on the cluster:

a. To configure access zone, use the WebUI, Access zones page or


the isi zone zones command.

b. Configure access zone for the Sales business unit.

i. Access zone name: sales

ii. Base directory: /ifs/sales

Hint: For the sales access zone, you need to create the base
directory while creating the access zone.

Question: What are the default permissions for the sales base
directory?

Instructor Note: 755

iii. Authentication provider: Active Directory

iv. Groupnet: groupnet0

c. Configure access zone for the Engineering business unit.

i. Access zone name: engineering

ii. Base directory: /ifs/engineering

iii. Authentication provider: LDAP

iv. Groupnet: groupnet0

Lab Guide - PowerScale Administration

Page 60 © Copyright 2020 Dell Inc.


Configuring Access Zones

d. Configure access zone for the Marketing business unit.

i. Access zone name: marketing

ii. Base directory: /ifs/marketing

iii. Authentication provider: Active Directory and LDAP

iv. Groupnet: groupnet0

e. Question: What is the default access zone configured for /ifs?

Instructor Note: The System access zone is the default access zone
configured for IFS.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 61
Configuring Access Zones

WebUI Step-by-Step Walk Through: Configure Access Zones


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Configure access zone for the Sales business unit.

a. Navigate to the Access, Access zones page. Click on Create an


access zone.

b. Enter the fields as shown in the graphic and then click Create zone.

Note: As the base directory for sales is not created, the checkbox for
Create zone base directory if it does not exist is checked.

3. Configure access zone for the Engineering business unit.

a. Click on Create an access zone. Enter the fields as shown in the


graphic and then click Create zone.

Lab Guide - PowerScale Administration

Page 62 © Copyright 2020 Dell Inc.


Configuring Access Zones

4. Configure access zone for the Marketing business unit.

a. Click on Create an access zone. Enter the fields as shown in the


graphic and then click Create zone.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 63
Configuring Access Zones

Lab Guide - PowerScale Administration

Page 64 © Copyright 2020 Dell Inc.


Configuring Access Zones

CLI Step-by-Step Walk Through: Configure Access Zones


5. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

a. Access zone: sales

i. isi zone zones create sales /ifs/sales --auth-


providers ads:dees.lab --create-path

Note: If the base directory is not created, use the --create-


path option in the command.

b. Access zone: engineering

i. isi zone zones create engineering


/ifs/engineering --auth-providers ldap:Isilon-
ldap

c. Access zone: marketing

i. isi zone zones create marketing /ifs/marketing


--auth-providers ads:dees.lab --auth-providers
ldap:Isilon-ldap

d. Verify: isi zone zones list

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 65
Configuring SmartConnect

Configuring SmartConnect

Scenario:

You have created the base directory structure, connected to the authentication
providers, and created the access zones. The next step is to configure
SmartConnect. You have enlisted the help of the DNS Administrator to get
SmartConnect configured and name resolution working for the cluster.

Given in the lab exercise is the information needed to configure SmartConnect. If


needed, use the step-by-step walk through portion of the exercise for guidance.

In this exercise, you will perform the following tasks:


• Create the SmartConnect service IP addresses for the subnet
• Create a SmartConnect zone for each access zone
• Create the DNS delegation records

Instructor Note: Instruct students to use either the objective


information, the WebUI step-by-step, or the CLI step-by-step method.

Lab Guide - PowerScale Administration

Page 66 © Copyright 2020 Dell Inc.


Configuring SmartConnect

SmartConnect
1. Use the following information to configure the SmartConnect service IP (SSIP):

a. You can use the WebUI, Network configuration page or the isi
network subnets modify command to configure the SSIP.

Tip: If you need to configure a single SSIP for the cluster, enter the
same IP for the start and end IP values in the range.

i. Subnet: subnet0

ii. Designated SmartConnect service IP address range:


192.168.3.9 - 192.168.3.10

Hint: To verify that the SSIP is configured successfully, use the


isi network subnets view command.

2. Configure the IP address pools for the three SmartConnect zones. You can
use the WebUI, Network configuration page or the isi network pools
create command.

Hint: Create the three IP address pools under subnet0 of groupnet0

a. IP address pool for sales access zone

i. Pool name: sales

ii. IP range: 192.168.3.21 - 192.168.3.29

iii. Interfaces: ext-1 of each node

Tip: In a hybrid cluster environment (mix of different node


types), you may only want to choose the interfaces of nodes
that the business unit will access. For example, in an
environment with a mix of F800 and H400 nodes, the
Engineering business unit may need access only to the F800
nodes. In that case, choose only the interfaces of the F800
nodes while creating the IP address pool for the Engineering
unit.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 67
Configuring SmartConnect

iv. Zone name / balance policy / allocation method:


sales.dees.lab / round-robin / static

Tip: To modify the values for balance policy and allocation


method, you need to activate the SmartConnect Advanced
license. For the purposes of the lab, you may activate a trail
version of the license by navigating to the Licensing page of
the WebUI or using the isi license command.

b. IP address pool for engineering access zone

i. Pool name: engineering

ii. IP range: 192.168.3.31 - 192.168.3.39

iii. Interfaces: ext-1 of each node

iv. Zone name / balance policy / allocation method:


engineering.dees.lab / round-robin / dynamic

c. IP address pool for marketing access zone

i. Pool name: marketing

ii. IP range: 192.168.3.41 - 192.168.3.49

iii. Interfaces: ext-1 of each node

iv. Zone name / balance policy / allocation method:


marketing.dees.lab / round-robin / static

3. Once the IP address pools are configured for each access zone, you need to
create the delegation records in DNS. Use the following information to create a
delegation record for each SmartConnect zone.

a. The DC VM is the DNS server. Login credentials for the DC console:


administrator/Dees12345!.

b. Create two new hosts in the forward lookup zone dees.lab named
sip9 and sip10. sip9 IP address is 192.168.3.9 and sip10 IP address
is 192.168.3.10.

c. Create the following new delegations:

Lab Guide - PowerScale Administration

Page 68 © Copyright 2020 Dell Inc.


Configuring SmartConnect

i. Delegated domain: sales. FQDN: sip9.dees.lab.

ii. Delegated domain: engineering. FQDN: sip10.dees.lab.

iii. Delegated domain: marketing. FQDN: sip9.dees.lab and


sip10.dees.lab.

d. Verify the DNS settings. Ping sales. Ping engineering. Ping


marketing. Ensure you get a reply from each delegation with an IP
address that is in the range defined in the SmartConnect zone.

Question: With the rebalance policy set to round-robin, when you


perform a second ping on a access zone, what should the reply IP
address be?

Instructor Note: The next IP address in the IP range of that access


zone. For sales, a second ping would return the IP address
192.169.3.22.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 69
Configuring SmartConnect

WebUI Step-by-Step Walk Through: Configure SmartConnect


Service IP
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the Cluster management, Network configuration page.

3. Click on the View/Edit for subnet0.

a. Click Edit and update the fields as shown in the graphic and click on
Save changes.

Lab Guide - PowerScale Administration

Page 70 © Copyright 2020 Dell Inc.


Configuring SmartConnect

CLI Step-by-Step Walk Through: SmartConnect Service IP


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

a. Configure: isi network subnets modify subnet0 --sc-


service-addr 192.168.3.9-192.168.3.10

b. Verify: isi network subnets view subnet0

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 71
Configuring SmartConnect

WebUI Step-by-Step Walk Through: IP Address Pools


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. On the Cluster management, Network configuration page, click More on


subnet0 and then Add pool. Enter the fields as shown in the graphics for
sales IP address pool and click on Add pool.

Lab Guide - PowerScale Administration

Page 72 © Copyright 2020 Dell Inc.


Configuring SmartConnect

Tip: In a hybrid cluster environment (mix of different node types), you may
only want to choose the interfaces of nodes that the business unit will access.
For example, in an environment with a mix of F800 and H400 nodes, the Sales
unit may need access only to the F800 nodes. In that case, choose only the
interfaces of the F800 nodes while creating the IP address pool for the Sales
unit.

3. Navigate to the Cluster management, Licensing page. Scroll down and click
on Manage trials. Select SmartConnect Advanced and click Start trial.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 73
Configuring SmartConnect

4. Navigate back to Cluster management, Network configuration page.

a. Click More on subnet0 and select Add pool. Enter the following to
create the engineering IP address pool:

• Pool name: engineering

• IP address range: 192.168.3.31 to 192.168.3.39

• Add all the external interfaces of ext-1 to manage the incoming traffic

• SmartConnect Basic: engineering.dees.lab

• SmartConnect Advanced: Set the Allocation method to Dynamic and


leave the rest with the default values.

Lab Guide - PowerScale Administration

Page 74 © Copyright 2020 Dell Inc.


Configuring SmartConnect

5. Click More on subnet0 and select Add pool. Enter the following to create the
marketing IP address pool:

• Pool name: marketing

• IP address range: 192.168.3.41 to 192.168.3.49

• Add all the external interfaces of ext-1 to manage the incoming traffic

• SmartConnect Basic: marketing.dees.lab

• SmartConnect Advanced: Default

6. Verify that the IP address pools are successfully created and listed under
subnet0 as shown in the graphic.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 75
Configuring SmartConnect

Lab Guide - PowerScale Administration

Page 76 © Copyright 2020 Dell Inc.


Configuring SmartConnect

CLI Step-by-Step Walk Through: IP Address Pools


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

a. Create sales SmartConnect zone: isi network pools create


groupnet0.subnet0.sales --access-zone sales --
aggregation-mode roundrobin --alloc-method static -
-ifaces 1-6:ext-1 --ranges 192.168.3.21-
192.168.3.29 --sc-dns-zone sales.dees.lab

Tip: In a hybrid cluster environment (mix of different node types), you


may only want to choose the interfaces of nodes that the business
unit will access. For example, in an environment with a mix of F800
and H400 nodes, the Sales unit may need access only to the F800
nodes. In that case, choose only the interfaces of the F800 nodes
while creating the IP address pool for the Sales unit.

b. Activate the SmartConnect Advanced license. At the boston-1


prompt, run the isi license add --evaluation
SmartConnect_Advanced command. At the : prompt, type q. To
agree to the EULA, type yes and press ENTER.

c. Create engineering SmartConnect zone: isi network pools


create groupnet0.subnet0.engineering --access-zone
engineering --aggregation-mode roundrobin --alloc-
method dynamic --ifaces 1-6:ext-1 --ranges
192.168.3.31-192.168.3.39 --sc-dns-zone
engineering.dees.lab

d. Create marketing SmartConnect zone: isi network pools


create groupnet0.subnet0.marketing --access-zone
marketing --aggregation-mode roundrobin --alloc-
method static --ifaces 1-6:ext-1 --ranges
192.168.3.41-192.168.3.49 --sc-dns-zone
marketing.dees.lab

e. Verify: isi network subnets list

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 77
Configuring SmartConnect

Lab Guide - PowerScale Administration

Page 78 © Copyright 2020 Dell Inc.


Configuring SmartConnect

Step-by-Step Walk Through: DNS Delegation


Once the IP address pools are configured for each access zone, you need to
create the delegation records in DNS.

1. From the VLP, open the DC console. The DC virtual machine is the domain
controller and the DNS server. Login using administrator/Dees12345!

2. Open the DNS Manager.

Tip: Click the shortcut on the taskbar.

a. In the navigation panel, open Forward Lookup Zones, and select


dees.lab.

b. Right-click on dees.lab and select New Host (A or AAAA).

3. In the New Host window, enter the fields as shown and then select Add Host.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 79
Configuring SmartConnect

4. Add a second New Host using the name sip10 and the IP address
192.168.3.10

5. In the navigation panel, right-click on dees.lab and then select New


Delegation. The New Delegation Wizard starts. A delegation domain on the
DNS acts a server name on the network to host shares, exports, and buckets
for the access zone.

a. On the welcome screen, click Next.

b. For the Delegated domain, type sales, click Next, and then click
Add on the Name Servers window.

c. For the Server fully qualified domain name (FQDN) enter


sip9.dees.lab and select OK and then Next.

d. On the Name Servers page, click Next, and then click Finish.

Lab Guide - PowerScale Administration

Page 80 © Copyright 2020 Dell Inc.


Configuring SmartConnect

6. Add two more delegations with the following settings

a. Delegated domain: engineering. FQDN: sip10.dees.lab.

b. Delegated domain: marketing. FQDN: sip9.dees.lab and


sip10.dees.lab.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 81
Configuring SmartConnect

c. In the navigation pane, right-click dees.lab and select Reload. Log off
the DC virtual machine.

7. Verify DNS settings. On the Jumpstation, open a command prompt. Ping


sales. Ping engineering. Ping marketing. Ensure you get a reply from each
delegation with an IP address that is in the range defined in the access zone
IP address pool.

Lab Guide - PowerScale Administration

Page 82 © Copyright 2020 Dell Inc.


Configuring SmartConnect

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 83
RBAC and ZRBAC

RBAC and ZRBAC

Scenario:

Before continuing with configuring user access, the IT manager has asked you to
grant administrative access control to other members of the team who will perform
various administrative activities on the cluster. For each member, create a user
account and assign the user to a suitable role. Create a user with auditing
privileges for the cluster and a user with administrative privileges for the
Engineering business unit.

Given in the lab exercise is the information needed to create and assign users to
roles. If needed, use the step-by-step walk through portion of the exercise for
guidance.

In this lab, you perform the following tasks:


• View the existing users, built-in roles, and privileges
• Create user accounts for System zone and Non-System zone users
• Assign the users to built-in roles

Lab Guide - PowerScale Administration

Page 84 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

RBAC and ZRBAC


1. Use the following information to view the default users, roles, and privileges.

a. View the default engineering and sales users. You can use the
WebUI, Users tab in the Membership and roles page or you can
use the isi auth users command.

Hint: Ensure that you choose the access zone.

Question: When selecting the providers, why is there a difference


between the sales zone users and engineering zone users?

Instructor Note: The engineering access zone is associated with


LDAP and lists the LDAP users and the sales access zone loads the
Domain Users from Active Directory.

b. View the default administrative roles. Use the WebUI, Roles tab in
the Membership and roles page or the isi auth roles
command.

Question: Why is there a difference between the System zone built-in


roles and non-System zone built-in roles?

Instructor Note: The access zones have their own distinct roles.

c. View the privileges for a role in the WebUI. Use the View/Edit button
next to the role name or use the isi auth roles view command.

Question: Is the list of the privileges different for each role? What
privilege enables login to the WebUI? What privilege enables SSH
login?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 85
RBAC and ZRBAC

Instructor Note: Answers: 1) YES 2) ISI_PRIV_LOGIN_PAPI 3)


ISI_PRIV_LOGIN_CONSOLE

2. Create a Local user. You can use the WebUI, Users tab in the Membership
and roles page or the isi auth users create command.

a. System Zone User

i. User Name: Dante

ii. Password: Dees12345!

iii. Primary Group: Isilon Users

iv. Home Directory: /ifs/home/dante

v. Enable Account: Yes

Question: How would you add an Active Directory user to the


System zone without creating the user on the cluster?

Instructor Note: Add the AD provider to the System zone and choose
the user from the AD users.

b. Engineering Zone User

i. User Name: engAdmin

ii. Password: Dees12345!

iii. Primary Group: Isilon Users

iv. Home Directory: /ifs/engineering/home/engAdmin

v. Enable Account: Yes

Lab Guide - PowerScale Administration

Page 86 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

Hint: To select the zone, use the --zone option in the CLI
command. For the WebUI, select the zone from the dropdown
menu.

3. Add users to roles. You can use the WebUI, Roles tab in the Membership
and roles page or the isi auth roles modify command.

a. User: Dante

i. Role: AuditAdmin

ii. Verify WebUI access: https://192.168.3.12:8080 (credentials:


user Dante, password Dees12345!)

Question: Can Dante create other users and assign them to


roles?

Instructor Note: No, because the AuditAdmin role does not have the
privileges.

b. User: engAdmin

i. Role: ZoneAdmin and ZoneSecurityAdmin

ii. Verify access using the WebUI URL:


https://engineering:8080 (credentials:
engAdmin/Dees12345!)

Question: Can engAdmin SSH into the cluster? Why or Why


not?

Instructor Note: No, because the ZoneAdmin and


ZoneSecurityAdmin roles do not have the ISI_PRIV_LOGIN_SSH
privilege that is required to SSH into the cluster.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 87
RBAC and ZRBAC

Lab Guide - PowerScale Administration

Page 88 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

WebUI Step-by-Step Walk Through: View Users, Roles, and


Privileges
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. To view the OneFS users that are created by default, navigate to the Access,
Membership and roles page. Click on the Users tab.

a. To view the users in the System zone, set the Current access zone
to System from the dropdown menu, and select the Providers from
the dropdown menu. The users under FILE: System are the core
accounts created by OneFS.

b. To view the users in the engineering zone, set the Current access
zone to engineering, and change the providers to LDAP: Isilon-
LDAP

c. Similarly view the users for different access zones and providers by
changing the Current access zone and Providers field.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 89
RBAC and ZRBAC

Note: When you choose an Active Directory provider, you need to


select the Active Directory Domain to view the users of that domain.

3. To view the built-in administrative roles, navigate to the Access, Membership


and roles page. Click on the Roles tab.

a. View the built-in roles for any zone by selecting that zone in the
Current access zone dropdown menu. Shown below is an example
of the built-in roles in the engineering zone. The engineering zone
has 2 built-in roles: ZoneAdmin and ZoneSecurityAdmin

b. To view the privileges for the ZoneAdmin role, click the View/Edit
button. In the View role details window, note the privileges.

Lab Guide - PowerScale Administration

Page 90 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

i. You may view the privileges of any role in any zone in a similar
manner. Also, view the privileges of a role in the CLI and
notice the difference in the naming from that shown in the
WebUI.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 91
RBAC and ZRBAC

CLI Step-by-Step Walk Through: View Users, Roles, and Privileges


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. To list the OneFS users that are created by default, at the boston-1 prompt,
run the following commands:

a. System zone: isi auth users list

b. Non-System zone:

i. engineering: isi auth users list --zone


engineering

ii. sales zone local users: isi auth users list --zone
sales

iii. Active Directory users: isi auth users list --zone


sales --domain "dees.lab"

iv. Similarly, view the users for other access zones by replacing
the zone name.

3. To list the built-in administrator roles, at the boston-1 prompt, run the following
commands:

a. System zone built-in roles: isi auth roles list

Lab Guide - PowerScale Administration

Page 92 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

b. Non-system zone built-in roles:

i. engineering: isi auth roles list --zone


engineering

ii. sales: isi auth roles list --zone sales

iii. Similarly, view the roles for other access zones by replacing
the zone name.

4. To view the privileges for the built-in roles, at the boston-1 prompt, run the
following commands:

a. For the SystemAdmin role in the System zone: isi auth roles
view SystemAdmin

b. For the ZoneAdmin role in the engineering zone: isi auth roles
view ZoneAdmin --zone engineering

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 93
RBAC and ZRBAC

c. Similarly, view the privileges for any role in any zone by replacing the
role and zone names.

Tip: Run the isi auth roles list --format table -v


command to view all privileges for all roles simultaneously.

Lab Guide - PowerScale Administration

Page 94 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

WebUI Step-by-Step Walk Through: Create User Account


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create a user account for user Dante in the System access zone.

a. Navigate to the Access, Membership and roles page. Click on the


Users tab. The Current access zone should be set to System. In
the Providers field, select LOCAL: System. Only the default Guest
account is listed. On the right side of the page, click Create user.

b. On the Create a user dialog box, enter the new user information as
shown in the graphic. After entering the user information, click the
Create user button.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 95
RBAC and ZRBAC

c. Verify that the user account for Dante is created successfully and
shown below the user Guest in the Users tab.

3. Create a user account for user engAdmin in the engineering access zone.

a. Navigate to the Access, Membership and roles page. Click on the


Users tab. The Current access zone should be set to engineering.
In the Providers field, select LOCAL: engineering. Click Create
user and enter the user information as shown in the graphic.

Lab Guide - PowerScale Administration

Page 96 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

b. Verify that the user account for engAdmin is created successfully


and shown below the user Guest in the Users tab.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 97
RBAC and ZRBAC

CLI Step-by-Step Walk Through: Create User Account


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create a user account for user Dante in the System access zone.

a. At the boston-1 prompt, run the isi auth users create Dante
--enabled yes --set-password --password-expires no
command.

i. At the password prompt, type Dees12345! and press ENTER.

ii. At the confirm prompt, type Dees12345! and press ENTER.

Note: The text you type at the password and confirm prompt will not be visible.

b. Verify that the user account for Dante has been created by running
the isi auth users list command.Note that without using the
--provider option, the output shows users from all the configured
providers.

3. Create a user account for user engAdmin in the engineering access zone.

a. At the boston-1 prompt, run the isi auth users create


engAdmin --zone engineering --enabled yes --set-
password --password-expires no command.

i. At the password prompt, type Dees12345! and press ENTER.

ii. At the confirm prompt, type Dees12345! and press ENTER.

b. Verify the user is created by running the isi auth users list -
-zone engineering command.

Lab Guide - PowerScale Administration

Page 98 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

c. View the user default setting by running the isi auth users view
engAdmin --zone engineering command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 99
RBAC and ZRBAC

WebUI Step-by-Step Walk Through: Add User to Role


In this task, you will add Dante to the AuditAdmin role. You have the option of
doing this through either the WebUI or the CLI. Instructions for the WebUI are
shown.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Add user Dante to the AuditAdmin role.

a. Navigate to the Access, Membership and roles page. Click on the


Roles tab. Set the Current access zone field to System. Click
View/Edit on the AuditAdmin role.

b. In the View role details window, click on Edit role. In the Edit role
details window, click on Add a member to this role.

Lab Guide - PowerScale Administration

Page 100 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

c. Select Dante as shown in the graphic. Once done, click Save


changes and then Close.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 101
RBAC and ZRBAC

3. Access the WebUI as Dante

a. Log out of the WebUI and login as Dante using the credentials
Dante/Dees12345!

Lab Guide - PowerScale Administration

Page 102 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

b. Notice the difference in menu options as compared to the user root.

4. Add user engAdmin to the ZoneAdmin and ZoneSecurityAdmin roles.

a. Navigate to the Access, Membership and roles page. Click on the


Roles tab. Set the Current access zone field to engineering.

b. Click View/Edit on the ZoneAdmin role. In the View role details


window, click on Edit role. In the Edit role details window, click on
Add a member to this role. Select engAdmin as shown in the
graphic. Once done, click Save changes and then Close.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 103
RBAC and ZRBAC

c. Add engAdmin to the ZoneSecurityAdmin role in a similar manner.

5. Access the WebUI as engAdmin.

a. Log out of the WebUI. In the Chrome browser, go to URL


https://engineering:8080. On the Your connection is not private
message, click Advanced and then click Proceed to engineering
(unsafe). Login using engAdmin/Dees12345!

Lab Guide - PowerScale Administration

Page 104 © Copyright 2020 Dell Inc.


RBAC and ZRBAC

b. Notice the difference in the homepage and menu options as


compared to the user root.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 105
RBAC and ZRBAC

CLI Step-by-Step Walk Through: Add User to Role


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Add user Dante to the AuditAdmin role.

a. At the boston-1 prompt, run the isi auth roles modify


AuditAdmin --add-user Dante command.

b. Verify by running isi auth roles view AuditAdmin | grep


Members

c. Start an SSH session to node 2 by double clicking Bos-node2. If you


get a PuTTY Security Alert, click Yes. Login using Dante/Dees12345!

i. At the boston-2 prompt, run the isi auth roles list


command and note the response.

3. Add user engAdmin to the ZoneAdmin and ZoneSecurityAdmin roles.

a. To add to the ZoneAdmin role, at the boston-1 prompt, run the isi
auth roles modify ZoneAdmin --add-user engAdmin --
zone engineering command.

b. Verify by running the isi auth roles view ZoneAdmin --


zone engineering | grep Members command.

c. To add to the ZoneSecurityAdmin role, at the boston-1 prompt, run


the isi auth roles modify ZoneSecurityAdmin --add-
user engAdmin --zone engineering command.

d. Verify by running the isi auth roles view


ZoneSecurityAdmin --zone engineering | grep Members
command.

e. You will be unable to SSH into the cluster as engAdmin because the
ZoneAdmin and ZoneSecurityAdmin roles are not assigned the
ISI_PRIV_LOGIN_SSH privilege which is require for SSH acces.

Lab Guide - PowerScale Administration

Page 106 © Copyright 2020 Dell Inc.


On-disk Identity

On-disk Identity

Scenario:

The On-disk identity stores an authoritative version of the identity for users and
groups. This becomes important when accessing restored files replicated to a
remote system. The IT manager has asked you to use the OneFS CLI to identify
the UID, GID, SID, and the On-disk identity for user accounts.

Given in the lab exercise is the information required to identify identities. If needed,
use the CLI step-by-step walk through portion of the exercise for guidance.

In this lab, you perform the following tasks:


• View UID, GID, SID and On-disk identity

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 107
On-disk Identity

On-disk Identity
1. Use the following information to help identify the UID, GID, SID, and the on-
disk identity for user accounts. This step can only be performed using the
OneFS CLI.

a. Ensure that the global setting for the On Disk Identity is set as
native. Use the WebUI Access > Settings page or the isi auth
settings global command.

b. View the access token for the marketing zone user sera. To do this,
use the isi auth mapping token command.

Question: Which authentication source is used to generate the user


sera access token? Which is the On-disk identity and why?

Instructor Note: 1) LDAP 2) UID, because an object that has an


explicit UNIX identity maintains that identity as the On Disk identity.

c. View the access token for the marketing zone user sera by
referencing the domain as dees\\sera or [email protected]

Question: Is the SID the same for user sera when referenced as
sera and dees\\sera? Why or Why not?

Instructor Note: Yes, because the user sera account exists in both
Active Directory and LDAP and the account has a real SID as well as
a real UID.

d. View the access token for the sales zone user john.

Hint: John belongs to the DEES domain.

Question: Which is the On-disk identity for user john? Why?

Lab Guide - PowerScale Administration

Page 108 © Copyright 2020 Dell Inc.


On-disk Identity

Instructor Note: The On Disk identity is the SID. User john only
exists in Active Directory. If an object lacks a real UID or GID, then its
SID is set as the On Disk identity. OneFS only uses a SID for the on
disk identity when no configured authentication sources return a real
UID or GID.

e. View the mapping information for user with UID 10. To do this, use
the isi auth mapping view command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 109
On-disk Identity

CLI Step-by-Step Walk Through: On-disk Identity


In this task, use the isi auth mapping command to locate on-disk identities for
users and groups, as well as complete reverse lookup of accounts. On-disk identity
output can help you resolve issues related to permissions and access.

1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open


mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Verify that the global setting for the On Disk Identity is set as native. To do
this, at the boston-1 prompt, run the isi auth settings global view
command and note the setting.

a. Change the setting, if needed, at the boston-1 prompt run the isi
auth settings global modify --on-disk-identity
native command.

3. View the access token for the marketing zone user sera. At the boston-1
prompt, run the isi auth mapping token sera --zone marketing
command.

a. Locate the UID and SID for user sera. Notice that the SID is an
algorithmic SID or 'UNIX SID', where the common S-1-22 is
appended with the UID to create a SID for an account that requires

Lab Guide - PowerScale Administration

Page 110 © Copyright 2020 Dell Inc.


On-disk Identity

one. Locate the GID and SID for the Primary Goup. Notice that the
SID is a UNIX SID.

b. Notice that the On Disk identity is the same as the UID. User sera is
an LDAP user. An object that has an explicit UNIX identity maintains
that identity as the On Disk identity.

4. At the boston-1 prompt, run the isi auth mapping token dees\\sera
--zone marketing command.

Note: The format to reference a user in Active Director is domain\\user or


username@domain. The domain is required.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 111
On-disk Identity

a. The On Disk identity setting is the UID. As the user account sera
exists in both Active Directory and LDAP, the account has a real SID
as well as a real UID.

5. View the access token for the sales zone user john. At the boston-1 prompt,
run the isi auth mapping token dees\\john --zone sales
command.

a. Note the On Disk identity for user john. The On Disk identity is the
SID. User john only exists in Active Directory. If an object lacks a real
UID or GID, then its SID is set as the On Disk identity. OneFS only
uses a SID for the on-disk identity when no configured authentication
sources return a real UID or GID.

6. To display the mapping information for a user with UID 10, at the boston-1
prompt, run the isi auth mapping view UID:10 command. You can
also view the mapping information for a user by using the SID or GID in the
command.

Lab Guide - PowerScale Administration

Page 112 © Copyright 2020 Dell Inc.


On-disk Identity

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 113
Permissions

Permissions

Scenario:

Before configuring the shares and exporting the file systems, the IT manager wants
you to become familiar with the way OneFS depicts and enforces permissions. For
this lab, view and modify the permissions on the cluster, and demonstrate how to
make a file or directory using advanced ACL.

Given in the lab exercise is the information needed to view, change and understand
file system permissions in OneFS. If needed, use the WebUI or the CLI step-by-
step walk through portion of the exercise for guidance.

In this lab, you perform the following tasks:


• View and change permissions for a directory
• Set a directory to ACL authoritative
• Add and remove an advanced ACL
• Verify the ACL policy settings

Lab Guide - PowerScale Administration

Page 114 © Copyright 2020 Dell Inc.


Permissions

Permissions
1. Use the following information to view, change the permissions and ownership
of the sales access zone base directory.

a. View the permissions and ownership of the sales base directory. You
can use the WebUI, File system explorer page or the ls command.

b. Change the owner of the sales base directory to the Active Directory
administrator. You can use the file system explorer of the WebUI or
the chown command.

c. Change the group owner of the sales base directory to the domain
administrators group. You can use the files system explorer of the
WebUI or the chgrp command.

d. Ensure that all individuals have read, write and execute access to the
sales base directory. You can use the files system explorer of the
WebUI or the chmod command.

2. Use the following information to change the authoritative permission type, add
and remove ACLs, for the sales base directory. This step can only be
performed only using the CLI.

a. Change the authoritative permission type for the sales base directory
to ACL. Use the chown command and its options.

Question: What is the indication that the directory is now ACL


authoritative?

Instructor Note: No Synthetic ACL wording and the "+" symbol is


present.

b. Add an advanced ACL to the sales base directory for a user. Use the
chmod command and its options.

i. User: nobody

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 115
Permissions

ii. Permissions: read, write, execute

Hint: The permission is generic_all

c. Add an advanced ACL to the sales base directory for a group. Use
the chmod command and its options.

i. Group: domain users

ii. Permissions: read, write, execute

Hint: The permission is generic_all

d. Remove the everyone ACL entry for the sales base directory. Use
the chmod command and its options.

e. Change the authoritative permission type of the sales base directory


to POSIX. Use the chmod command and its options.

Question: If a Windows user accesses the directory, which


permissions are used to authorize the user, POSIX or ACLs?

Instructor Note: Synthetic ACLs

3. Use the following information to understand the impact of changing the ACL
policy settings. This step can be performed only using the WebUI.

a. View the default ACL policy settings. Use the Access menu in the
WebUI.

b. Change the environmental variable with the different options and note
the changes to different settings.

Question: For each option, what is the impact of using chmod on files
that have existing ACLs?

Lab Guide - PowerScale Administration

Page 116 © Copyright 2020 Dell Inc.


Permissions

Instructor Note: Balanced: Merge the permissions, UNIX: Remove


ACLs and set UNIX permissions, Windows: Deny permission to
modify ACL

Note: Change the Environment back to Balanced when you


complete the lab exercise.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 117
Permissions

WebUI Step-by-Step Walk Through: Permissions and Ownership


In this task, you will view permissions, change permissions and change the
ownership of the sales access zone base directory using the WebUI.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Examine the permissions and ownership of the sales access zone base
directory.

a. Navigate to the File system, File system explorer page. Set the
Current access zone to sales. On the sales directory, click View
details.

b. In the View directory property details window, you can see the
permissions and ownership set for the directory.

Lab Guide - PowerScale Administration

Page 118 © Copyright 2020 Dell Inc.


Permissions

3. Change the permissions and ownership for the sales access zone base
directory.

a. In the View directory property details window, click the Edit


properties button.

b. Change the User (owner) of the directory to the Active Directory


administrator. In the User field, click on Browse. Select the user as
shown in the graphic.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 119
Permissions

c. Next, change the Group (owning group) of the directory to the


DEES\domain admins group. In the Group field, click on Browse.
Select the group as shown in the graphic.

Lab Guide - PowerScale Administration

Page 120 © Copyright 2020 Dell Inc.


Permissions

d. The IT manager wants the permissions for the base directory writable
for all individuals. Ensure all the Permissions check boxes are
checked. Click Save changes, and then Close.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 121
Permissions

CLI Step-by-Step Walk Through: Permissions and Ownership


In this task, you will view permissions, change permissions and change the
ownership of the sales access zone base directory using the CLI.

1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open


mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Examine the permissions and ownership of the sales access zone base
directory. At the boston-1 prompt, run the ls -led /ifs/sales command.
Note the permissions and ownership for the directory.

Note: The ls command lists the directory contents. The -l option is to list files
in the long format. The -e option prints the Access Control List (ACL). The -d
option lists on the directory and not its contents.

3. Change the permissions and ownership for the sales access zone base
directory.

a. Change the owner of the sales base directory to the Active Directory
administrator. At the boston-1 prompt, run the chown
[email protected] /ifs/sales command.

b. Change the owning group of the sales base directory to the


DEES\domain admins group. At the boston-1 prompt, run the
chgrp "DEES\\domain admins" /ifs/sales command.

c. The IT Manager wants you to make sure that any individual


accessing the directory has read, write, and execute permissions. To
change permissions, at the boston-1 prompt, run the chmod 777
/ifs/sales command.

d. Verify the changes to the permissions and ownership. At the boston-


1 prompt, run the ls -led /ifs/sales command.

Lab Guide - PowerScale Administration

Page 122 © Copyright 2020 Dell Inc.


Permissions

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 123
Permissions

Step-by-Step Walkthrough: ACL Authoritative


In this task, you change the permission authority to ACLs, add an ACL, remove an
ACL, and change the permission authority back to POSIX. This exercise can be
performed only using the CLI.

1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open


mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. View the authoritative permission type for the sales access zone base
directory. At the boston-1 prompt, run the ls -led /ifs/sales command.
Note that the permission type is set to POSIX as the ACL for the sales
directory is the Synthetic ACL.

3. Change the permission authority of the /ifs/sales directory to ACL.

a. At the boston-1 prompt, run the chown -s administrator@dees


/ifs/sales command.

Note: Although the owner of the directory was the Active Directory
administrator, the -s option uses an external authentication provider
and in this example, makes the directory ACL authoritative.

b. Run the ls -led /ifs/sales command. Note that the Synthetic


ACL wording is absent and a "+" symbol is added next to the POSIX
bits.

4. Explicitly add an advanced ACL for a user.

a. At the boston-1 prompt, run the chmod +a user nobody allow


generic_all /ifs/sales command. The chmod +a adds a new
ACL entry and inserts it into the canonical location in the ACL.

b. Run the ls -led /ifs/sales command and note the entry of the
added user.

Lab Guide - PowerScale Administration

Page 124 © Copyright 2020 Dell Inc.


Permissions

Note: The nobody account is used for mapping root users over NFS to a different
UID so they are not treated as root on the cluster. This is known as root squash.
The generic_all permission represents Full Control permissions in Windows.

5. Explicitly add an advanced ACL for a group.

a. At the boston-1 prompt, run the chmod +ai group


'dees\domain users' allow generic_all /ifs/sales
command. Use chmod +ai to add inheritance flags to the ACL
entries. Inheritance flags can also be added specifically as part of the
ACE.

b. Run the ls -led /ifs/sales command and note the entry of the
added group.

6. Remove an ACL.

a. At the boston-1 prompt, run the chmod -a# 3 /ifs/sales


command. This deletes ACL position 3, the everyone ACL.

b. Run the ls -led /ifs/sales command to verify.

7. Switch the /ifs/sales from ACL authoritative to POSIX authoritative.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 125
Permissions

a. Use the chmod -b command. At the boston-1 prompt, run the


chmod -b 777 /ifs/sales command. The -b option removes
the ACL and replaces it with the specified UNIX permissions.

b. Run the ls -led /ifs/sales command. Note that POSIX is the


authoritative permission type and that the synthetic ACLs have
changed to correspond with the POSIX mode bits.

Note: With POSIX authoritative, changing the mode bits also changes
the synthetic ACLs.

Lab Guide - PowerScale Administration

Page 126 © Copyright 2020 Dell Inc.


Permissions

Step-by-Step Walk Through: ACL Policy Setting


In this task, the IT manager wants you to understand the impact of changing the
ACL policy settings. This exercise can be performed only using the WebUI.

1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a


Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the Access, ACL policy settings page.

a. The default setting for the Environment is set to Balanced. To


compare between the different options, note the changes to the Use
the chmod command on files with existing ACLs setting as you
switch between the options.

b. Change the Environment to UNIX only. Note the changes.

c. Change the Environment to Windows only. Note the changes.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 127
Permissions

d. Change the Environment back to Balanced.

Note: In the given scenario, you have created access zone sales that
authenticates using Active Directory, engineering that authenticates
using LDAP, and marketing that uses both authentication providers.
The ideal setting for such a setup is Balanced.

Lab Guide - PowerScale Administration

Page 128 © Copyright 2020 Dell Inc.


SMB Shares

SMB Shares

Scenario:

The Marketing business unit has requested two Windows shares for their
environment. The first share is to accommodate home directories for all the
marketing users and the second share is for general purpose file sharing. Once the
shares are created, verify accessibility from an SMB client.

Given in the lab exercise is the information needed to configure SMB shares. If
needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Create home directories
• Create a general purpose share

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 129
SMB Shares

SMB Shares
1. Create a share to accommodate home directories for all marketing users.

a. Enable SMB service. Use the WebUI, Windows sharing (SMB) page
or the isi services command.

b. Create a share. Use the WebUI, Windows sharing (SMB) page or


the isi smb shares command.

Hint: Ensure to set the access zone before creating the share.

i. Share name: home

ii. Path: /ifs/marketing/home/%U

iii. Allow variable expansion: yes

iv. Auto create directory: yes

v. Permissions: Set permissions so Everyone has full access

Hint: Use the --wellknown option when using the isi smb
shares permission command. In the WebUI, you may
change the permissions by clicking the View/Edit button.

c. Map the user home directory using the File Explorer on the
Jumpstation.

i. Folder: \\marketing\home

d. Verify that the home directory for user John is created. Use the File
system explorer page of the WebUI or the ls command.

2. Create a general share for all the marketing users.

a. Create a share. You can use the WebUI, Windows sharing (SMB)
page or the isi smb shares create command.

Hint: Ensure to set the access zone before creating the share.

i. Share name: mktg-share

Lab Guide - PowerScale Administration

Page 130 © Copyright 2020 Dell Inc.


SMB Shares

ii. Path: /ifs/marketing/mktg-share

iii. Create SMB share directory: yes

iv. Directory ACLs: Do not change existing permissions

b. Map the user home directory using the File Explorer on the
Jumpstation.

i. Folder: \\marketing\mktg-share

c. Verify access to the share.

i. Create a new folder in the mktg-share.

Question: Why do you get an access denied message when


attempting to create the new folder?

Instructor Note: Permission issue

ii. Change the permissions to Full Control for member


Everyone. Use the Windows sharing (SMB) page or the isi
smb shares permission command. Try to create a new
folder in the mktg-share.

Question: Why do you get an access denied when attempting


to create the new folder?

Instructor Note: The share is POSIX authoritative.

iii. Change the permissions for the mktg-share directory. You can
use the File system explorer page of the WebUI or the

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 131
SMB Shares

chmod command. Try to create a new folder in the mktg-


share.

Lab Guide - PowerScale Administration

Page 132 © Copyright 2020 Dell Inc.


SMB Shares

WebUI Step-by-Step Walk Through: Home Directories


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Enable SMB service.

a. Navigate to the Protocols, Windows sharing (SMB) page. Select


the SMB server settings tab. Check Enable SMB service, scroll
down and click Save changes.

3. Navigate to the Protocols, Windows sharing (SMB) page. Select the SMB
shares tab. Set the Current access zone to marketing. Click on Create an
SMB share.

4. In the Create an SMB share window, enter the fields as shown and click
Create share.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 133
SMB Shares

Note: When joining the Active Directory domain, the Domain Users group is
automatically added to the cluster's user group by default. This can be seen by
selecting Add member and choosing an AD user.

5. Map the user home directory.

a. Minimize the WebUI.

Lab Guide - PowerScale Administration

Page 134 © Copyright 2020 Dell Inc.


SMB Shares

b. Open the File Explorer on the Jumpstation by clicking the icon on


the task bar. Right-click on This PC and click on Map network drive.

c. Enter the field as shown and select Finish.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 135
SMB Shares

d. In the left navigation panel, click This PC to view the Folders,


Devices and drives, and Network locations panel. Notice that the
home directory is mapped. Double-click on the mapped share to
ensure you have access.

6. Go back to the WebUI and navigate to the File system, File system explorer
page. Set the Current access zone to marketing. Click on home. Verify that
the john home directory has been created.

Lab Guide - PowerScale Administration

Page 136 © Copyright 2020 Dell Inc.


SMB Shares

CLI Step-by-Step Walk Through: Home Directories


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Enable SMB service.

a. At the boston-1 prompt, run the isi services smb enable


command.

3. To create an SMB share to accommodate home directories for all marketing


users, at the boston-1 prompt, run the following commands:

a. Create share: isi smb shares create home --


zone=marketing --path=/ifs/marketing/home/%U --
allow-variable-expansion=yes --auto-create-
directory=yes

b. Modify permissions: isi smb shares permission modify


home --zone=marketing --wellknown Everyone --
permission-type=allow --permission=full

4. Map the user home directory.

a. Minimize mRemoteNG.

b. Open the File Explorer on the Jumpstation by clicking the icon on the
task bar. Right-click on This PC and click on Map network drive.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 137
SMB Shares

c. Enter the field as shown and select Finish.

d. In the left navigation panel, click This PC to view the Folders,


Devices and drives, and Network locations panel. Notice that the

Lab Guide - PowerScale Administration

Page 138 © Copyright 2020 Dell Inc.


SMB Shares

home directory is mapped. Double-click on the mapped share to


ensure you have access.

5. Verify that the john home directory has been created. Go back to
mRemoteNG, at the boston-1 prompt, run ls /ifs/marketing/home and
ensure that john is listed.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 139
SMB Shares

WebUI Step-by-Step Walk Through: General Purpose Share


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create a general share for all the marketing users.

a. Navigate to the Protocols, Windows sharing (SMB) page. Set the


Current access zone to marketing. Click on Create an SMB share.

b. In the Create an SMB share window, enter the fields as shown and
click Create share.

3. Minimize the WebUI. Go to the File Explorer on the Jumpstation to map the
share. Map the mktg-share share. Refer to the previous task if required.

Lab Guide - PowerScale Administration

Page 140 © Copyright 2020 Dell Inc.


SMB Shares

4. Verify access to the share.

a. In the mapped mktg-share, right click in the right panel, select New
and then select Folder. Why do you get an access denied message?
This is because you do not have the needed permissions.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 141
SMB Shares

b. Go back to the WebUI. Navigate to Protocols, Windows sharing


(SMB) page, marketing access zone. On the mktg-share, select
View / Edit and then click Edit SMB share. Change the permissions
as shown. Save changes and Close.

c. Go back to the File Explorer on the Jumpstation and try to create a


new folder in mktg-share. Why do still get access denied? This is
because when creating an SMB share with the ACL policy settings
set to Balanced, and the Directory ACLs setting is Do not change
existing permissions, the share is POSIX authoritative.

Lab Guide - PowerScale Administration

Page 142 © Copyright 2020 Dell Inc.


SMB Shares

5. Change the permissions on the mktg-share folder.

a. Go back to the WebUI. Navigate to the File system, File system


explorer page, marketing access zone. On the mktg-share folder,
select View / Edit and then select Edit properties. Change the
permissions as shown. Save changes and Close.

b. Go back to the File Explorer on the Jumpstation and try to create a


new folder in mktg-share. You will be able to create the folder
successfully.

Note: When a share is created with the ACL policy settings set to
Balanced and the Directory ACLs setting set to Apply Windows
default ACLs, the share is ACL authoritative.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 143
SMB Shares

CLI Step-by-Step Walk Through: General Purpose Share


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create a general share for all the marketing users. At the boston-1 prompt,
run the isi smb shares create mktg-share --zone=marketing --
path=/ifs/marketing/mktg-share --create-path command.

3. Minimize mRemoteNG. Go to the File Explorer on the Jumpstation to map the


share. Map the mktg-share share. Refer to the previous task if required.

4. Verify access to the share.

a. In the mapped mktg-share, right click in the right panel, select New
and then select Folder. Why do you get an access denied message?
This is because you do not have the needed permissions.

Lab Guide - PowerScale Administration

Page 144 © Copyright 2020 Dell Inc.


SMB Shares

b. At the boston-1 prompt, run the isi smb share view mktg-
share --zone marketing | grep -ie Permission -e
Everyone command. Notice that the permission is set as allow read
for Everyone.

c. At the boston-1 prompt, run the isi smb shares permission


modify mktg-share --zone=marketing --wellknown
Everyone --permission-type=allow --permission=full
command. The permissions for Everyone is set to Full Control.

d. Go back to the File Explorer on the Jumpstation and try to create a


new folder in mktg-share. Why do still get access denied? This is
because when creating an SMB share with the ACL policy settings

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 145
SMB Shares

set to Balanced, and the Directory ACLs setting is Do not change


existing permissions, the share is POSIX authoritative.

5. Change the permissions on the mktg-share folder.

a. At the boston-1 prompt, run the chmod 777


/ifs/marketing/mktg-share command.

b. Go back to the File Explorer on the Jumpstation and try to create a


new folder in mktg-share. You will be able to create the folder
successfully.

Note: When a share is created with the ACL policy settings set to
Balanced and the Directory ACLs setting set to Apply Windows
default ACLs, the share is ACL authoritative.

Lab Guide - PowerScale Administration

Page 146 © Copyright 2020 Dell Inc.


NFS Exports

NFS Exports

Scenario:

Now that you have configured the Windows shares, export the directories to the
Linux users. The IT manager has asked that you create, configure, export, and
mount a general purpose directory for use by the marketing members that use
Linux clients. Although the dominant access to the files is using Linux, some
Windows users may also access the files. The IT manager wants you to
understand root squash and the permission behavior.

Given in the lab exercise is the information needed to configure NFS exports. If
needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Create an export
• Mount an export

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 147
NFS Exports

NFS Exports
1. Create a general purpose NFS export for the marketing members using Linux
clients.

a. Create a general purpose directory in the marketing access zone.


You can use the File system explore page of the WebUI or the
mkdir and chmod commands.

i. Directory Name: mktg-export

ii. Permissions: Read, Write, Execute for User, Group, and


Others

b. Enable NFS service. You can use the UNIX sharing (NFS) page of
the WebUI or the isi services command.

c. Create the export for the mktg-export directory in the marketing


access zone. You can use the UNIX sharing (NFS) page of the
WebUI or the isi nfs exports command.

i. Directory Path: /ifs/marketing/mktg-export

ii. Read-Write Clients: 192.168.3.3

Question: When a client is not specified, what is the default


behavior for all the clients connecting to the export?

Instructor Note: Any client not restricted by rules can access the
export.

d. Create an NFS alias for the export in the marketing access zone.
You can use the NFS aliases tab of the UNIX sharing (NFS) page in
the WebUI or the isi nfs aliases command.

i. Alias Name: gen-purpose

ii. Path: /ifs/marketing/mktg-export

Lab Guide - PowerScale Administration

Page 148 © Copyright 2020 Dell Inc.


NFS Exports

2. Mount the NFS directory exported from the cluster to the Centos machine.
This step can be performed only with the CLI.

a. Open an SSH connection to the Centos machine in the lab


enviroment. Login using root/Dees12345!

b. Mount the exported mktg-export directory on the Centos client. Use


the mount command.

i. NFS export: marketing:/gen-purpose

Hint: If the DNS and alias are not configured, use the IP
address for the marketing access zone and the directory path
for the export.

ii. Mount point: /mnt/gen-purpose

Hint: You need to create the mount point directory on the


Centos client using the mkdir command.

c. Create a empty file named test using the touch command. Verify the
owner and group for the test file using the ls command.

Question: Why is the user and group not root on the file test that
user root on the Centos client created?

Instructor Note: root is squashed to nobody

d. On the cluster, revoke the Write permission for Others in the mktg-
export directory and note that the owner for the directory is user root.
You can use the File system explorer page of the WebUI or the
chmod and ls commands.

e. In the Centos client, try to create another empty file named test1.

Question: Why do you get a permission denied response?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 149
NFS Exports

Instructor Note: Because root on the cluster and root on the client
are not the same user.

f. Add the Centos root (192.168.3.3) to the Root clients rule of the NFS
export for the mktg-export directory. You can use the UNIX sharing
(NFS) page of the WebUI or the isi nfs exports command.

g. Try to create file test1 again on the Centos client. Verify the owner
and group for file test1.

h. Remove all the empty files created using the rm command.

Lab Guide - PowerScale Administration

Page 150 © Copyright 2020 Dell Inc.


NFS Exports

WebUI Step-by-Step Walk Through: Create an Export


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create the mktg-export directory.

a. Navigate to the File System, File system explorer page. Set the
Current access zone field to marketing. Click on Create directory.

b. Enter the fields as shown and click Create directory.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 151
NFS Exports

3. Enable NFS service.

a. Navigate to the Protocols, UNIX sharing (NFS) page. Select the


Global settings tab. Check Enable NFS export service and click
Save changes.

Lab Guide - PowerScale Administration

Page 152 © Copyright 2020 Dell Inc.


NFS Exports

4. Create the export for the mktg-export directory.

a. Navigate to the Protocols, UNIX sharing (NFS) page. Set the


Current access zone field to marketing. Click Create export.

b. Enter the fields as shown and click Create export.

Note: IP address 192.168.3.3 is the NFS client (centos machine) that


you are giving read-write permissions to.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 153
NFS Exports

5. Create an NFS alias for the export so the user will not have access to the full
directory path of their export. An alias creates a shortcut for the directory path
name.

a. Navigate to the Protocols, UNIX sharing (NFS) page. Select the


NFS aliases tab. Set the Current access zone field to marketing.
Click Create alias.

b. Enter the fields as shown and click Create alias.

Lab Guide - PowerScale Administration

Page 154 © Copyright 2020 Dell Inc.


NFS Exports

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 155
NFS Exports

CLI Step-by-Step Walk Through: Create an Export


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create the mktg-export directory. At the boston-1 prompt, run the following
commands:

a. Create: mkdir /ifs/marketing/mktg-export

b. Change Permissions: chmod 777 /ifs/marketing/mktg-


export

3. Enable NFS service.

a. At the boston-1 prompt, run the isi services nfs enable


command.

4. Create the export for the mktg-export directory. At the boston-1 prompt, run
the following commands:

a. Create Export: isi nfs exports create


/ifs/marketing/mktg-export --zone marketing --read-
write-clients 192.168.3.3

Note: IP address 192.168.3.3 is the NFS client (centos machine) that


you are giving read-write permissions to.

b. View export settings:

i. Get the export ID: isi nfs exports list --zone


marketing

ii. View settings: isi nfs exports view <ID> --zone


marketing

Lab Guide - PowerScale Administration

Page 156 © Copyright 2020 Dell Inc.


NFS Exports

Replace the <ID> field in the command with the export ID.

5. Create an NFS alias for the export so the user will not have access to the full
directory path of their export. An alias creates a shortcut for the directory path
name. At the boston-1 prompt, run the following commands:

a. Create: isi nfs aliases create /gen-purpose


/ifs/marketing/mktg-export --zone marketing

b. Verify: isi nfs aliases list --zone marketing

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 157
NFS Exports

Step-by-Step Walk Through: Mount the Export


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. In the Connections panel, double-click
Centos. Login using root/Dees12345!

2. Mount the exported mktg-export directory to the Centos client. At the


root@centos prompt, perform the following steps:

a. Create a mount point on the Centos machine to mount the mktg-


export directory export on the cluster. Run the mkdir /mnt/gen-
purpose command. The /mnt/gen-purpose is the directory on the
Centos machine that you are mounting the cluster export to.

b. Mount the export: Run the mount marketing:/gen-purpose


/mnt/gen-purpose command. You will use the NFS alias you
created earlier (gen-purpose).

Note: If DNS were not configured, you can use an IP address that is
in the marketing IP address pool configured on the cluster. Without
using DNS and without using an NFS alias, the command may look
like mount 192.168.3.33:/ifs/marketing/mktg-export
/mnt/gen-purpose

c. Verify the mount: Run the mount | grep marketing


command.

3. On the Centos SSH connection, run the whoami command to verify you are
user root.

a. Create an empty file named test by running the touch /mnt/gen-


purpose/test command.

b. Run the ls -l /mnt/gen-purpose command. The user and


group is not root as the root of the Centos client is squashed to user
nfsnobody.

Lab Guide - PowerScale Administration

Page 158 © Copyright 2020 Dell Inc.


NFS Exports

c. Return to the cluster CLI, at the boston-1 prompt, run the ls -l


/ifs/marketing/mktg-export and note that root is squashed as
nobody. Alternatively, you may navigate to the File system, File
system explore page of the WebUI, marketing access zone, mktg-
export directory, and view the details on the test file.

4. Revoke the Write permission for Others. You may perform this step either
using the WebUI or CLI.

a. WebUI option: On the Jumpstation, open a Chrome browser and


launch the WebUI (https://192.168.3.11:8080). Login to the cluster
using root/Dees12345!

i. Navigate to the File system, File system explorer page,


marketing access zone, and select View / Edit for mktg-
export.

ii. Select Edit properties. Note that the user is root. Uncheck the
write permission for Others. Click on Save changes and
Close.

b. CLI option: On the Jumpstation, open mRemoteNG and double-


click on Bos-node1, and SSH using root/Dees12345!

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 159
NFS Exports

i. At the boston-1 prompt, run the chmod 775


/ifs/marketing/mktg-export command.

ii. Verify by running the ls -led /ifs/marketing/mktg-


export command. Note that the user is root.

5. Return to the Centos CLI and run the touch /mnt/gen-purpose/test1


command. You will get a Permission denied response. The root on the Centos
machine is not the same user as the root on the cluster. The root on the
cluster is the owner of the mktg-export directory. The Centos root is
squashed as user nfsnobody who belongs to Others and has no write
permission on the mktg-export directory.

6. The root user of the Centos client is a trusted root for the cluster. Change the
root squash for the client. You may perform this step either using the WebUI or
CLI.

a. WebUI option: On the Jumpstation, open a Chrome browser and


launch the WebUI (https://192.168.3.11:8080). Login to the cluster
using root/Dees12345!

i. Navigate to the Protocols, UNIX sharing (NFS) page, NFS


exports tab, access zone marketing. Click on View/Edit for
/ifs/marketing/mktg-export.

ii. Click Edit export. In the Edit NFS export details window,
enter 192.168.3.3 in the Root clients field. This is the Centos
client where user root is trusted. Click Save changes and then
Close.

Lab Guide - PowerScale Administration

Page 160 © Copyright 2020 Dell Inc.


NFS Exports

b. CLI option: On the Jumpstation, open mRemoteNG and double-


click on Bos-node1, and SSH using root/Dees12345!

i. Get ID: Run the isi nfs exports list --zone


marketing command to get the export ID.

ii. Add root client: Run the isi nfs exports modify <ID>
--zone marketing --root-clients 192.168.3.3
command. Replace the <ID> field with the export ID.

iii. Verify: Run the isi nfs exports view <ID> --zone
marketing command. Replace the <ID> field with the export
ID. Notice that 192.168.3.3 has been added as a root client.
This is the Centos client where user root is trusted.

7. Return to the Centos CLI. Run the touch /mnt/gen-purpose/test1


command to create an empty file. Notice that there is no permission denied
response.

a. Run the ls -l /mnt/gen-purpose command. By adding the


client to the Root clients on the cluster, root is not squashed for the
Centos client.

Note: The 192.168.3.3 client is configured under the Root clients rule as well as
the Always read/write clients rule. The Root clients rule takes precedence.

b. Return to the cluster CLI, at the boston-1 prompt, run the ls -l


/ifs/marketing/mktg-export and note that root is the owner of

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 161
NFS Exports

the test1 file. Alternatively, you may navigate to the File system, File
system explore page of the WebUI, marketing access zone, mktg-
export directory, and view the details on the test1 file.

8. Run the rm /mnt/gen-purpose/test* command to cleanup the directory.


Enter Y when prompted to confirm the directory cleanup.

Lab Guide - PowerScale Administration

Page 162 © Copyright 2020 Dell Inc.


S3

S3

Scenario:

The IT manager wants the Marketing users to access data from an S3 application.
Demonstrate the S3 configuration steps to create a bucket and access the bucket
using other protocols.

Given in the lab exercise is the information needed to configure S3. If needed, use
the WebUI or the CLI step-by-step walk through portion of the exercise for
guidance.

In this lab, you perform the following tasks:


• Create a S3 bucket
• Access the S3 bucket

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 163
S3

S3 Buckets
1. Configure S3 for the marketing access zone and verify multi-protocol access.

a. Enable the S3 service. Use the Object storage (S3) page of the
WebUI or the isi services command.

b. Set the base domain for the marketing access zone settings. Use the
Object storage (S3) page of the WebUI or the isi s3 settings
command.

i. Base domain: marketing.dees.lab

c. Create a bucket in the marketing access zone. Use the Object


storage (S3) page of the WebUI or the isi s3 buckets command.

i. Bucket name: mktg-bucket

ii. Path: /ifs/marketing/mktg-bucket

iii. Owner: DEES\john

iv. Create path: Yes

d. Create a secret key for the Active Directory user John. Note the
Access id and the Secret Key. Use the Object storage (S3) > Key
management page of the WebUI or the isi s3 keys command.

e. Create a new account in the S3 Browser. Open the browser from the
desktop or taskbar. Use the Access id and the Secret Key obtained
from the previous task.

i. Account Name: PowerScale

ii. Account Type: S3 Compatible Storage

iii. REST Endpoint: marketing.dees.lab:9021

f. Using the S3 Browser, upload the Animation directory located in the


File-Repository directory to mktg-bucket.

Lab Guide - PowerScale Administration

Page 164 © Copyright 2020 Dell Inc.


S3

g. Create a new SMB share in the marketing access zone. Use the
Windows Sharing (SMB) page of the WebUI or the isi smb
shares command.

i. Name: mktg-bucket

ii. Path: /ifs/marketing/mktg-bucket

iii. Directory ACLs: Apply Windows default ACLs

iv. Permissions: Set permissions so Everyone has full access

h. Map the mktg-bucket share using Windows Explorer. Verify that you
are able to access the Animation folder.

i. Folder: \\marketing\mktg-bucket

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 165
S3

WebUI Step-by-Step Walk Through: Configure S3


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create a S3 bucket in the marketing access zone.

a. First, we need to enable S3 and the S3 HTTP port. Navigate to the


Protocols, Object storage (S3) page. Select the Global settings
tab. Check the box to enable S3 and HTTP and click Save changes.
We will leave the port number with the default value.

b. Configure the zone settings. Select the Zone settings tab and
change the current access zone to marketing. Enter the base
domain and as shown and click Save changes.

c. To create a bucket, select the Buckets tab and set the current
access zone to marketing. Click Create Bucket and enter the fields

Lab Guide - PowerScale Administration

Page 166 © Copyright 2020 Dell Inc.


S3

as shown. Select the Owner as DEES\john as shown in the second


graphic. Once done, click Create Bucket.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 167
S3

d. Once done, you will find the bucket listed in the Buckets table.

3. Add contents to the S3 bucket and verify multi-protocol access.

a. Create a secret key for the Active Directory user John. On the Object
storage (S3) page, select the Key management tab. Set the current
access zone to marketing. Select user John and click Create new
key. A new key secret key will be listed in the Secret key Details
table. Note the Access id and the Secret key for user John.

Lab Guide - PowerScale Administration

Page 168 © Copyright 2020 Dell Inc.


S3

b. Open the S3 Browser using the taskbar or the desktop. Enter the
details as shown in the graphic to create a new account. You need to
copy the Access id and the Secret Key from the WebUI and paste
them in the new account form. Once done, Add new account.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 169
S3

c. The mktg-bucket will be listed on the left. To add contents, select the
bucket and then click Upload > Upload Folder. Choose the
Animation directory from the File-Repository directory and click
Select Folder. Once uploaded, the folder will appear on the right.

Lab Guide - PowerScale Administration

Page 170 © Copyright 2020 Dell Inc.


S3

d. Now, try to access the bucket using SMB. Create a SMB share in the
marketing access zone as shown. Refer to the SMB Shares
exercise of the lab guide for the detailed procedure.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 171
S3

e. Map the mktg-bucket share on the Jumpstation. Verify that you are
able to access the Animation folder.

Lab Guide - PowerScale Administration

Page 172 © Copyright 2020 Dell Inc.


S3

CLI Step-by-Step Walk Through: Configure S3


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create a S3 bucket in the marketing access zone.

a. First, we need to enable S3 and and the S3 HTTP port. At the


boston-1 prompt, run the isi services s3 enable command.
Then, run the isi s3 settings global modify --https-
only=no command.

b. Verify by running the isi s3 settings global view command.

c. Configure the zone settings. At the boston-1 prompt, run the isi s3
settings zone modify --base-domain
marketing.dees.lab --zone marketing command.

d. Verify by running the isi s3 settings zone view --zone


marketing command.

e. To create a bucket, run the isi s3 buckets create mktg-


bucket /ifs/marketing/mktg-bucket --create-path --
owner DEES\\john --zone marketing command.

f. Verify by running the isi s3 buckets view mktg-bucket --


zone marketing command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 173
S3

3. Add contents to the S3 bucket and verify multi-protocol access.

a. Create a secret key for the Active Directory user John. At the
boston-1 prompt, run the isi s3 keys create DEES\\john --
zone marketing command. Note the Access id and the Secret
key for user John.

b. Open the S3 Browser using the taskbar or the desktop. Enter the
details as shown in the graphic to create a new account. You need to
copy the Access ID and the Secret Key from the CLI and paste them
in the new account form. Once done, Add new account.

Lab Guide - PowerScale Administration

Page 174 © Copyright 2020 Dell Inc.


S3

c. The mktg-bucket will be listed on the left. To add contents, select the
bucket and then click Upload > Upload Folder. Choose the
Animation directory from the File-Repository directory and click
Select Folder. Once uploaded, the folder will appear on the right.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 175
S3

d. Now, try to access the bucket using SMB. At the boston-1 prompt,
run the isi smb shares create mktg-bucket --
zone=marketing --path=/ifs/marketing/mktg-bucket -
-i=yes command. Change the permissions by running the isi smb
shares permission modify mktg-bucket --
zone=marketing --wellknown Everyone --permission-
type=allow --permission=full command.

e. Verify by running the isi smb shares view mktg-bucket --


zone=marketing command.

f. Map the mktg-bucket share on the Jumpstation. Verify that you are
able to access the Animation folder.

Lab Guide - PowerScale Administration

Page 176 © Copyright 2020 Dell Inc.


S3

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 177
HTTP - Optional

HTTP - Optional

Scenario:

The Marketing business unit has requested the use of HTTP for their clients. The IT
manager has asked you to configure HTTP on the cluster for the Marketing
business unit and test the connection.

Given in the lab exercise is the information needed to configure HTTP. If needed,
use the WebUI or the CLI step-by-step walk through portion of the exercise for
guidance. This is an optional lab exercise for the course. You may choose to either
perform or skip this exercise.

In this lab, you perform the following tasks:


• Configure and enable HTTP
• Connect and verify HTTP access

Lab Guide - PowerScale Administration

Page 178 © Copyright 2020 Dell Inc.


HTTP - Optional

HTTP
1. Use the following information to configure HTTP for the cluster.

a. Create the HTTP root directory in the marketing access zone. You
can use the File system explorer page of the WebUI or the mkdir
command.

i. Directory name: streaming

ii. Permissions: Read, Write, Execute for User, Group and


Others.

iii. Path: /ifs/marketing

b. Configure HTTP for the cluster. You can use the HTTP settings page
of the WebUI or the isi http settings command.

i. HTTP Service Enabled: Yes

ii. HTTP Authentication: Basic Authentication Only

iii. Document Root Directory: /ifs/marketing/streaming

2. Use the following information to access the cluster using HTTP.

a. Add contents to the HTTP root directory.

i. Change the HTTP root directory (/ifs/marketing/streaming) to


ACL authoritative. Use the chown -s command.

ii. Copy the main_config_changes.log file from the .ifsvar


directory to the HTTP base directory. Use the cp command.

iii. Give full permission to the copied log file in the HTTP base
directory. Use the chmod command.

b. Access the cluster using HTTP.

i. Go to URL 192.168.3.11 and login as John (username:


dees\john, password: Dees12345!)

ii. Open the log file to verify access.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 179
HTTP - Optional

Lab Guide - PowerScale Administration

Page 180 © Copyright 2020 Dell Inc.


HTTP - Optional

WebUI Step-by-Step Walk Through: Configure HTTP


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create HTTP root directory.

a. Navigate to the File System, File system explorer page. Set the
Current access zone field to marketing. Click on Create directory.

b. Enter the fields as shown and click Create directory.

3. Configure HTTP for the cluster.

a. Navigate to Protocols, HTTP settings. Enter the fields as shown and


click Save changes.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 181
HTTP - Optional

Lab Guide - PowerScale Administration

Page 182 © Copyright 2020 Dell Inc.


HTTP - Optional

CLI Step-by-Step Walk Through: Configure HTTP


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create HTTP root directory. At the boston-1 prompt, run the following
commands:

a. Create directory: mkdir /ifs/marketing/streaming

b. Change permissions: chmod 777 /ifs/marketing/streaming

3. Configure HTTP for the cluster.

a. At the boston-1 prompt, run the isi http settings modify --


service enabled --basic-authentication yes --
server-root /ifs/marketing/streaming command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 183
HTTP - Optional

Step-by-Step Walk Through: Accessing Using HTTP


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Add contents to the HTTP root directory. At the boston-1 prompt, perform the
following steps:

a. Change directory permissions to ACL authoritative by running the


chown -s root /ifs/marketing/streaming command. Since
the directory will be accessed by a Windows host, we will make the
directory ACL authoritative.

b. Copy the main_config_changes log file from the .ifsvar directory to


the HTTP base directory (/ifs/marketing/streaming): cp
/ifs/.ifsvar/main_config_changes.log
/ifs/marketing/streaming

c. Give full permissions to the log file by running the chmod 777
/ifs/marketing/streaming/main_config_changes.log
command. You will get an access denied message if the permissions
are not set.

3. Access the cluster using HTTP.

a. On the Jumpstation, open a Chrome browser or open a new tab on


an open browser. In the address bar, type 192.168.3.11, and then
press ENTER.

b. Enter the credentials for user John (username: dees\john, password:


Dees12345!) and then click Sign in.

Lab Guide - PowerScale Administration

Page 184 © Copyright 2020 Dell Inc.


HTTP - Optional

c. To verify access, on the Index page, click on the log file to ensure the
file opens.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 185
HTTP - Optional

Lab Guide - PowerScale Administration

Page 186 © Copyright 2020 Dell Inc.


Data Protection and File Layout

Data Protection and File Layout

Scenario:

As part of the documentation process, the IT manager has asked you to analyze
how OneFS uses data protection levels to protect data, and then lead a small
workshop for the team to ensure everyone understands OneFS data protection.
The IT manager has created exercises to identify the protection levels of the file
layouts for various protection strips, as well as determine the overhead for cluster
sizing. You will review and make changes to the data protection settings for
directory and file protection levels that can affect node pool, folder, and file.

Given in the lab exercise is the information needed to configure Data Protection. If
needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Answer the data protection questions
• Configure node pool level data protection
• Configure directory and file level data protection

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 187
Data Protection and File Layout

Data Protection and File Layout


1. Before configuring data protection levels, reinforce your understanding of
protection overhead and file layout.

a. Data protection chart used for the exercises.

b. Answer the following questions.

i. Question: Given that you are using an existing Gen 6 cluster


running OneFS 9.0 that is set for N+2d:1n, what is the stated
protection overhead for an 8 node cluster?

Instructor Note: Answer: 13%

ii. Question: What is the percentage of protection overhead for


the cluster when adding another full chassis to the node pool?

Lab Guide - PowerScale Administration

Page 188 © Copyright 2020 Dell Inc.


Data Protection and File Layout

Instructor Note: Answer: 12 nodes = 11%

iii. Question: Given 4 full chassis in a cluster with N+4n


protection, what is the protection overhead?

Instructor Note: Answer: 16 nodes = 25%

iv. Question: With an 18-node cluster, going from N+2n to N+4n,


what can be said about the overhead needed for protection?

Instructor Note: Answer: Doubles from 11% to 22%

v. Question: Reference the image below. Given a 1 MB file. The


file has two data stripes. What is the protection level for this
file?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 189
Data Protection and File Layout

Instructor Note: Answer: N+2d:1n

2. Configure Data Protection at a Node Pool level.

a. Change the Requested protection for the vmware_100gb_6gb


node pool to +1n. Use the Storage pools page of the WebUI or the
isi storagepool nodepools command.

Hint: Ensure to get the node pool ID if you are performing this step
using the CLI.

Question: A message in the WebUI indicates that the L3 cache


cannot be enabled. What action would you need to take to enable L3
cache?

Lab Guide - PowerScale Administration

Page 190 © Copyright 2020 Dell Inc.


Data Protection and File Layout

Instructor Note: Add SSDs to the nodes

Question: Check the SmartPools module status in the Summary tab.


Does a message inform you of a change?

Instructor Note: Yes. The message indicates the requested


protection is below the suggested protection.

b. Change the Requested protection in the default file pool policy to


+2d:1n. Use the Storage pools page of the WebUI or the isi
filepool command.

Question: Note the Storage Pools > Summary tab has an Info
message stating vmware_100gb_6gb requested protection is
different than the suggested protection. What does this mean?

Instructor Note: OneFS suggests a different protection level because


data is at risk.

c. Change the Requested protection for the vmware_100gb_6gb


node pool to +2d:1n. Use the Storage pools page of the WebUI or
the isi storagepool nodepools command.

3. Configure Data Protection at a Directory and File level.

a. Create directory mktg-DP in the marketing access zone. Ensure that


everyone has full access. Use the File system explorer page of the
WebUI or the mkdir and chmod commands.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 191
Data Protection and File Layout

b. Change the protection settings for the mktg-DP directory. Use the
File system explorer page of the WebUI or the isi set command.

i. Data storage target: vmware_100gb_6gb

ii. Requested protection: +1n

Hint: To edit these fields in the WebUI, ensure to uncheck the


Managed by SmartPools option.

c. Create an SMB share for the mktg-DP directory. Use the Windows
sharing (SMB) page of the WebUI or the isi smb shares
command.

i. Share Name: mktg-DP

ii. Path: /ifs/marketing/mktg-DP

iii. Directory ACLs: Apply Windows Default ACLs

iv. Permissions: Set permissions so Everyone has full access

d. Map \\marketing\mktg-DP using the Windows File Explorer on the


Jumpstation. Copy the Animation folder from the File Repository to
the mapped share.

e. Verify the protection level on the /ifs/marketing/mktg-


DP/Animation/ANIMATION.wmv file. Use the File system explorer
page of the WebUI or the isi get command.

Note: Although the file policy is set at +2d:1n protection, the explicit
directory permission on the mktg-DP directory takes precedence.

Question: In the output of the isi get /ifs/marketing/mktg-


DP/Animation/ANIMATION.wmv , what is the data layout of
LEVEL 5+1 ?

Lab Guide - PowerScale Administration

Page 192 © Copyright 2020 Dell Inc.


Data Protection and File Layout

Instructor Note: 5 data stripe units and 1 FEC stripe unit spread
across 1 drive per node, which means N+1n protection.

f. Change the Requested protection for the /ifs/marketing/mktg-


DP/Animation/ANIMATION.wmv file to +3d:1n. Use the File system
explorer page of the WebUI or the isi set command.

Note: Although the file policy is set at +2d:1n protection, and the
explicit directory permission on the mktg-DP directory is set at +1n,
the explicit protection policy at the file level takes precedence.

g. Verify the protection level on the /ifs/marketing/mktg-


DP/Animation/ANIMATION.wmv file once again.

Question: What is the data layout of LEVEL 15+3/3 ?

Instructor Note: 15 data stripe units and 3 FEC stripe units spread
across 3 drive per node.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 193
Data Protection and File Layout

WebUI Step-by-Step Walk Through: Configuring Node Pool Level


Protection
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the File System, Storage pools page, Summary tab. The
Summary tab displays storage pool status and local storage usage statistics.
The SmartPools info message indicates that the requested protection is
different than the protection suggested by OneFS. The Info message is not an
error.

3. Configure the +1n protection level for the vmware_100gb_6gb node pool.

a. Navigate to the SmartPools tab. Notice the protection setting of the


vmware_100gb_6gb node pool. Click on the Pool:
vmware_100gb_6gb. Change the protection level to +1n and click
Save changes.

Lab Guide - PowerScale Administration

Page 194 © Copyright 2020 Dell Inc.


Data Protection and File Layout

b. Verify that the protection level has changed for vmware_100gb_6gb


in the SmartPools tab.

i. Go to the Summary tab and note the message for the


SmartPools module.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 195
Data Protection and File Layout

4. Change the protection level for the default file pool policy. Navigate to the File
Pool Policies tab and click View details for Default policy. Click on Edit
policy. Change the Requested protection to +2d:1n and click Save
changes.

Lab Guide - PowerScale Administration

Page 196 © Copyright 2020 Dell Inc.


Data Protection and File Layout

5. Change the protection level for vmware_100gb_6gb back to +2d:1n and


verify. Use the same procedure mentioned in Step 3.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 197
Data Protection and File Layout

CLI Step-by-Step Walk Through: Configuring Node Pool


Protection Levels
1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Configure the +1n protection level for the vmware_100gb_6gb node pool.

a. At the boston-1 prompt, run the isi storagepool nodepools


list command. Note the ID and the Protection Policy for the
vmware_100gb_6gb node pool.

b. To change the Protection Policy, you need the ID of the node pool
that you want to change. Run the isi storagepool nodepools
modify <node pool ID> -p +1n command. The -p option tells
you which protection level you are going to use. Replace the <node
pool ID> in the command with the ID for the vmware_100gb_6gb
node pool.

c. Run the isi storagepool nodepools list command again and


verify that the protection level has changed.

Lab Guide - PowerScale Administration

Page 198 © Copyright 2020 Dell Inc.


Data Protection and File Layout

3. Change the protection level for the default file pool policy to +2d:1n.

a. At the boston-1 prompt, run the isi filepool default-policy


modify --set-requested-protection +2:1 command.

b. Verify by running the isi filepool default-policy view


command.

4. Change the protection level for vmware_100gb_6gb back to +2d:1n. At the


boston-1 prompt, run the isi storagepool nodepools modify <node
pool ID> -p +2d:1n command. Replace the <node pool ID> in the
command with the ID for the vmware_100gb_6gb node pool.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 199
Data Protection and File Layout

Lab Guide - PowerScale Administration

Page 200 © Copyright 2020 Dell Inc.


Data Protection and File Layout

WebUI Step-by-Step Walk Through: Configuring Directory and File


Level Protection
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Configure the +1n protection level for the mktg-DP directory.

a. Navigate to the File system, File system explorer page, System


access zone. Click on View/Edit for the marketing directory and
verify the directory is managed by SmartPools. Close when done.

b. Change the Current access zone to marketing and create a new


directory named mktg-DP as shown.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 201
Data Protection and File Layout

c. Click on View/Edit for mktg-DP and click on Edit properties. Under


Protection settings, uncheck the Managed by SmartPools setting
and set the fields as shown in the graphic. Click Save changes and
close the window when done.

Lab Guide - PowerScale Administration

Page 202 © Copyright 2020 Dell Inc.


Data Protection and File Layout

3. Add contents to the mktg-DP directory.

a. Create an SMB share named mktg-DP in the marketing access zone


as shown. Refer to the SMB shares exercise for the detailed
procedure.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 203
Data Protection and File Layout

b. Map the mktg-DP share and then copy the Animation folder from the
File-Repository directory to the mapped share.

Lab Guide - PowerScale Administration

Page 204 © Copyright 2020 Dell Inc.


Data Protection and File Layout

4. Verify the protection level for the files located in mktg-DP

a. Navigate to the File system, File system explorer page, System


access zone. Navigate to the mktg-DP/Animation directory. Click on
View/Edit for the file ANIMATION.wmv. Verify that the protection
level for the file is set as +1n and close the window.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 205
Data Protection and File Layout

b. Although the file policy is set at +2d:1n protection, the explicit


directory permission on the mktg-DP directory takes precedence.

5. Configure +3d:1n protection level for the ANIMATION.wmv file.

a. Navigate to the File system, File system explorer page, marketing


access zone. Navigate to the mktg-DP/Animation directory. Click on
View/Edit for the ANIMATION.wmv file. Click on Edit properties and
change the fields as shown. Once done, click on Save changes and
close.

Lab Guide - PowerScale Administration

Page 206 © Copyright 2020 Dell Inc.


Data Protection and File Layout

b. View the file properties once again to verify the changes and close
the window.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 207
Data Protection and File Layout

c. Although the file policy is set at +2d:1n protection, and the explicit
directory permission on the mktg-DP directory is set at +1n, the
explicit protection policy at the file level takes precedence.

Lab Guide - PowerScale Administration

Page 208 © Copyright 2020 Dell Inc.


Data Protection and File Layout

CLI Step-by-Step Walk Through: Configuring Directory and File


Level Protection
1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Configure the +1n protection level for the mktg-DP directory. At the boston-1
prompt, run the following commands:

a. Create Directory: mkdir /ifs/marketing/mktg-DP

b. Change Permissions: chmod 777 /ifs/marketing/mktg-DP

c. Configure Protection Level: isi set -p +1n --diskpool


<node pool ID> /ifs/marketing/mktg-DP

Note: Replace the <node pool ID> in the command with the ID for
the vmware_100gb_6gb node pool. Run the isi storagepool
nodepools list command to get the ID.

d. Verify: isi get /ifs/marketing

3. Add contents to the mktg-DP directory.

a. Create an SMB share named mktg-DP in the marketing access


zone. At the boston-1 prompt, run the following commands:

i. Create Share: isi smb shares create mktg-DP --


zone=marketing --path=/ifs/marketing/mktg-DP -
-i=yes

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 209
Data Protection and File Layout

ii. Change Permissions: isi smb shares permission


modify mktg-DP --zone=marketing --wellknown
Everyone --permission-type=allow --
permission=full

b. Map the mktg-DP share and then copy the Animation folder from the
File-Repository directory to the mapped share.

Lab Guide - PowerScale Administration

Page 210 © Copyright 2020 Dell Inc.


Data Protection and File Layout

4. Verify the protection level for the files located in mktg-DP

a. Check the protection level for the ANIMATION.wmv file. At the


boston-1 prompt, run the isi get /ifs/marketing/mktg-
DP/Animation/ANIMATION.wmv command.

b. Although the file policy is set at +2d:1n protection, the explicit


directory permission on the mktg-DP directory takes precedence.

5. Configure +3d:1n protection level for the ANIMATION.wmv file.

a. Configure: Run the isi set -p +3d:1n


/ifs/marketing/mktg-DP/Animation/ANIMATION.wmv
command.

b. Verify: Run the isi get /ifs/marketing/mktg-


DP/Animation/ANIMATION.wmv command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 211
Data Protection and File Layout

Note: You may see a different protection level initially as it takes


some time for the requested protection level to change for the file.

c. Although the file policy is set at +2d:1n protection, and the explicit
directory permission on the mktg-DP directory is set at +1n, the
explicit protection policy at the file level takes precedence.

Lab Guide - PowerScale Administration

Page 212 © Copyright 2020 Dell Inc.


SmartPools

SmartPools

Scenario:

The IT manager has asked you to tier cluster data on two different types of storage.
Use SmartPools to create node pools and tiers. Use file pools policies to specify
target files to move and store on a different tier with different protection settings.
The protection levels you choose are unique to your workflows, your clusters, and
your organization requirements. What is an acceptable failure rate for one
organization may be unacceptable to another.

Given in the lab exercise is the information needed to configure SmartPools. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Create node pool and tier

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 213
SmartPools

SmartPools
1. Configure SmartPools.

a. Activate SmartPools license. For the lab environment, you will use
the trial license functionality. Use the Licensing page of the WebUI
or the isi license command.

b. Create a manual node pool named media_pool, by splitting the


existing six-node, node pool into two three-node, node pools. Note
that this operation can only be perform using the OneFS CLI. Use the
isi storagepool nodepools command.

i. Name: media_pool

ii. Nodes: 4,5, and 6

c. Change the protection level for media_pool to +3d:1n. Use the


Storage pools page of the WebUI or the isi storagepool
nodepools command.

d. Build a tier to encompass the newly created node pool. Use the
Storage pools page of the WebUI or the isi storagepool
tiers command.

i. Name: media_tier

ii. Node pool: media_pool

Lab Guide - PowerScale Administration

Page 214 © Copyright 2020 Dell Inc.


SmartPools

WebUI Step-by-Step Walk Through: Configure SmartPools


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Navigate to the File System, Storage pools page, Summary tab. The
Summary tab displays storage pool status and local storage usage statistics.
Note that in the Status section, under the Module column, you will notice that
Policies indicates a Status of Caution because SmartPools is not yet
licensed. The SmartPools and SmartPool settings module should both show
a status of Info or Good. The CloudPools module should show a status of
Caution because CloudPools is also not yet licensed.

3. Activate SmartPools license. For the lab environment, you will use the trial
license functionality.

a. Navigate to the Cluster management, Licensing page. At the


bottom of the page, select the Manage trials button.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 215
SmartPools

b. Check SmartPools and click on Start trial. Once done, close the
window.

c. Navigate to the Licensing page, Software licenses overview table.


Ensure that the Status of SmartPools is set as Evaluation.

4. Create a manual node pool named media_pool by splitting the existing six-
node, node pool into two three-node, node pools. Note that you can only
perform this operation using the OneFS CLI.

a. On the Jumpstation, open mRemoteNG from the taskbar. Select


Bos-node1, and SSH using root/Dees12345!

b. At the boston-1 prompt, run the isi storagepool nodepools


create media_pool -n 4,5,6 command.

c. To verify, return to the WebUI. Navigate to the File system, Storage


pools page, SmartPools tab. Verify that the newly created
media_pool node pool shows as consisting of nodes 4 – 6. The
original node pool vmware_100gb_6gb now shows as only
encompassing nodes 1 – 3 because you have manually removed
Nodes 4 – 6 from that node pool.

Lab Guide - PowerScale Administration

Page 216 © Copyright 2020 Dell Inc.


SmartPools

d. The blue "X" in the actions column is an indication the newly created
media_pool is manually created and can be deleted. The gray "X" on
the vmware_100gb_6gb indicates that it is automatically created by
OneFS.

5. Change the protection level for media_pool to +3d:1n.

a. In the SmartPools tab, click the Pool: media_pool link. Set the
requested protection for the node pool to +3d:1n, click Save
changes.

6. Create a tier to encompass the newly created node pool. You will configure a
file pool policy shortly to use the tier.

a. Ensure you are still on the Storage pools page, SmartPools tab. To
create a tier, click the Create a tier button and name the tier as
media_tier. Add the media_pool to the tier. Click Create tier.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 217
SmartPools

b. Verify media_tier displays in the Tiers and node pools list.

The media_pool node pool displays under the media_tier. In this


example, the tier has only one node pool in it, but additional node
pools can be added to media_tier.

Lab Guide - PowerScale Administration

Page 218 © Copyright 2020 Dell Inc.


SmartPools

CLI Step-by-Step Walk Through: Configure SmartPools


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate SmartPools license. For the lab environment, you will use the trial
license functionality.

a. At the boston-1 prompt, run the isi license add --


evaluation SmartPools command. At the : prompt, type q. To
agree to the EULA, type yes and press ENTER.

b. Verify by running the isi license list command.

3. Create a manual node pool named media_pool by splitting the existing six-
node, node pool into two three-node, node pools. Note that this operation can
only be perform using the OneFS CLI.

a. At the boston-1 prompt, run the isi storagepool nodepools


create media_pool -n 4 -n 5 -n 6 command.

b. To verify, run the isi storagepool nodepools list command.


Verify that the newly created media_pool node pool shows as
consisting of nodes 4 – 6. The original node pool
vmware_100gb_6gb now shows as only encompassing nodes 1 – 3

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 219
SmartPools

because you have manually removed nodes 4 – 6 from that node


pool.

c. The Manual column indicates that the media_pool is a manually


created node pool wheras the original vmware_100gb_6gb was
automatically created by OneFS when the nodes joined the cluster.

4. Change the protection level for media_pool to +3d:1n.

a. At the boston-1 prompt, run the isi storagepool nodepools


modify media_pool -p +3d:1n command.

b. To verify, run the isi storagepool nodepools list command.

5. Create a tier to encompass the newly created node pool. You will configure a
file pool policy shortly to use the tier.

a. At the boston-1 prompt, run the isi storagepool tiers


create media_tier --children media_pool command.

b. Verify by running the isi storagepool tiers view


media_tier command.

Lab Guide - PowerScale Administration

Page 220 © Copyright 2020 Dell Inc.


SmartPools

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 221
File Pool Policies

File Pool Policies

Scenario:

The IT manager has asked you to use file pools policies to specify targets files to
move and store on a different tier with different protection settings.

Given in the lab exercise is the information needed to configure File Pool Policies.
If needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Configure Default File pool policy
• Create and verify a File pool policy

Lab Guide - PowerScale Administration

Page 222 © Copyright 2020 Dell Inc.


File Pool Policies

File Pool Policies


1. Configure the default File Pool Policy.

a. Review the cluster default file pool policy. Use the Storage pools
page of the WebUI or the isi filepool command.

Question: Without SmartPools licensed, what is the effect of the


default file pool policy on the cluster data?

Instructor Note: The default policy will be applied to all the data on
the cluster. The only exception is data for which there is some manual
configuration specified.

b. For this scenario, ensure that files only go to the Default node pool
(vmware_100gb_6gb). Change the default file policy in the Storage
pools page of the WebUI or use the isi filepool default-
policy command.

i. Data Storage Target: vmware_100gb_6gb

ii. Data SSD Strategy: Metadata read acceleration

iii. Snapshot Storage Target: vmware_100gb_6gb

iv. Snapshot SSD Strategy: Metadata read acceleration

Question: Where will the data on the cluster reside if the


storage target in the default file pool policy is set as
anywhere?

Instructor Note: The data will be randomly distributed and balanced


between vmware_100gb_6gb or media_pool

2. Create a file pool policy. A file pool policy consists of two components, Filters

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 223
File Pool Policies

and Actions. The filters are used to select the files and the actions modify the
setting of the files selected by the filter.

a. Copy the mydocuments folder from the File-Repository directory in


the Jumpstation into the mapped share mktg-share.

b. Review the location and protection level of data residing in the


mydocuments folder. Use the isi get command.

Tip: To get information on the location of data, ensure to use the -D


option in the command.

Question: With the default storage target set as


vmware_100gb_6gb node pool, why do some files show that they
are located on the media_pool node pool?

Instructor Note: Initially when data is written, the files may reside in
other node pools as well. In time, the data will eventually be moved to
the target node pool configured in the default policy. This operation
can also be manually triggered by running the SmartPoolsTree job.

c. Create a file pool policies to change the protection and location of


.mp4 files present in the mydocuments directory. Use the Storage
pools page of the WebUI or the isi filepool policies
command.

i. Policy name: media_policy

ii. Filter: The Filename must end with .mp4

iii. Data Storage Target: media_tier

iv. Data SSD Strategy: Metadata read acceleration

v. Protection Level: +3d:1n1d

Question: Since the policy is designated for .mp4 files, what


data access pattern should you set to optimize the content?

Lab Guide - PowerScale Administration

Page 224 © Copyright 2020 Dell Inc.


File Pool Policies

Instructor Note: Streaming

d. Test the effect the media_policy has on the files. Run the
SmartPools Tree job. Note that the job may take a few minutes to
complete. Use the Job operations page of the WebUI or the isi
job jobs command.

i. Path: /ifs

e. Verify that the policy and disk pool is media_pool for all the .mp4
files. Use the isi get command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 225
File Pool Policies

WebUI Step-by-Step Walk Through: Configure Default File Pool


Policy
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Review the cluster default file pool policy.

a. Navigate to the File system, Storage pools page. Click the File pool
policies tab. Only the Default policy is displayed. At this stage the
Default policy applies to all data written to the cluster for which some
manual configuration has not been specified.

Note: You will not see the Create a file pool policy button if
SmartPools is not licensed. Without the license, you cannot create
file pool policies.

b. In the File pool policies table, in the Action column, click View
Details for the Default policy. In the View default policy details
window, review the different settings and close the window.

Lab Guide - PowerScale Administration

Page 226 © Copyright 2020 Dell Inc.


File Pool Policies

3. For this scenario, ensure that files only go to the default node pool
(vmware_100gb_6gb). With the Storage target and Snapshot storage
target set to anywhere, files will be placed across all node pools.

a. Click the View/Edit button for the Default policy. Click Edit policy.
Make the changes as shown and then click Save changes and
Close.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 227
File Pool Policies

Lab Guide - PowerScale Administration

Page 228 © Copyright 2020 Dell Inc.


File Pool Policies

CLI Step-by-Step Walk Through: Configure Default File Pool Policy


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Review the cluster default file pool policy.

a. At this stage, only the default policy file pool policy is configured. The
default policy applies to all data written to the cluster for which some
manual configuration has not been specified.

Note: You will not be able to create a new file pool policy if
SmartPools is not licensed.

b. At the boston-1 prompt, run the isi filepool default-policy


view command and review the different settings.

3. For this scenario, ensure that files only go to the default node pool
(vmware_100gb_6gb). With the Storage target and Snapshot storage

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 229
File Pool Policies

target set to anywhere, files will be placed across all node pools.

a. At the boston-1 prompt, run the isi filepool default-policy


modify --data-storage-target vmware_100gb_6gb --
data-ssd-strategy metadata --snapshot-storage-
target vmware_100gb_6gb --snapshot-ssd-strategy
metadata command to change the storage target and snapshot
target to the vmware_100gb_6gb node pool.

b. Verify by running the isi filepool default-policy view


command.

Lab Guide - PowerScale Administration

Page 230 © Copyright 2020 Dell Inc.


File Pool Policies

Step-by-Step Walk Through: Create File Pool Policy


A file pool policy consists of two components, Filters and Actions. The filters are
used to select the files and the actions modify the setting of the files selected by the
filter.

1. On the Jumpstation, login as DEES\John (password: Dees12345!).

2. Open the Windows File Explorer on the Jumpstation and map the mktg-
share, if it is not mapped. Copy the mydocuments folder from the File-
Repository directory into the mapped share mktg-share. If needed, you can
review the SMB Shares lab for the steps to map a share.

3. Review the location and protection level of data residing in the mydocuments
folder.

a. Open mRemoteNG from the taskbar. Select Bos-node1, and SSH


using root/Dees12345!

b. At the boston-1 prompt, run the isi get


/ifs/marketing/mktg-share/mydocuments/Manual-

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 231
File Pool Policies

battery-test-gen5.mp4 command to get the file attributes for


the Manual-battery-test-gen5.mp4 file.

c. At the boston-1 prompt, run the isi get -D


/ifs/marketing/mktg-share/mydocuments/Manual-
battery-test-gen5.mp4 | grep "Disk pools" command to
view the disk pools setting for the file. Since the target for the Default
policy is node pool vmware_100gb_6gb, the files will be put into
node pool vmware_100gb_6gb. If the output from the command
shows files in the media_pool, eventually all the files will move to the
vmware_100gb_6gb node pool.

d. If you do not change the target node pools for the Default policy, the
files can be in either of the two node pools because the Default
policy writes to anywhere, and will randomly balance which node
pool a file is written. Running the isi get -D
/ifs/marketing/mktg-share/mydocuments/* | grep
"Disk pools" command shows the distribution of the files across
the two pools.

4. Create a file pool policy to change the protection and location of .mp4 files
present in the mydocuments directory. You may perform this step either
using the WebUI or the CLI.

a. WebUI Option: Open a Chrome browser and launch the WebUI


(https://192.168.3.11:8080). Login to the cluster using
root/Dees12345!

i. Navigate to the the File system, Storage pools page, File


pool policies tab. Click Create a file pool policy. Use the
settings shown and click Create policy.

Lab Guide - PowerScale Administration

Page 232 © Copyright 2020 Dell Inc.


File Pool Policies

ii. Verify that the media_policy is listed in the File pool policies
tab.

b. CLI Option: Open mRemoteNG from the taskbar. Select Bos-node1,


and SSH using root/Dees12345!

i. At the boston-1 prompt, run the isi filepool policies


create media_policy --begin-filter --
name='*.mp4' --operator=eq --end-filter --set-
requested-protection=+3d:1n1d --data-storage-

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 233
File Pool Policies

target=media_tier --data-ssd-strategy metadata


command.

ii. Verify by running the isi filepool policies view


media_policy command.

5. Test the effect the media_policy has on the files. Run the SmartPools Tree
job. Note that the job may take a few minutes to complete. You may perform
this step either using the WebUI or the CLI.

a. WebUI option: Open a Chrome browser and launch the WebUI


(https://192.168.3.11:8080). Login to the cluster using
root/Dees12345!

i. To run the job, go to Cluster management, Job operations,


and the Job types tab. On the SmartPoolsTree job, select
Start job and Start job again.

Lab Guide - PowerScale Administration

Page 234 © Copyright 2020 Dell Inc.


File Pool Policies

ii. On the Job summary tab, monitor the job. The indication that
the job is completed is when the job is no longer present in the
Active jobs table.

b. CLI option: Open mRemoteNG from the taskbar. Select Bos-node1,


and SSH using root/Dees12345!

i. At the boston-1 prompt, run the isi job jobs start


SmartPoolsTree --path /ifs command.

ii. Run the isi job jobs list command. This displays a list
of all the active jobs. The indication that the job is completed is
when the job is no longer present in the list. Run the command
once every minute to find out if it has been completed.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 235
File Pool Policies

6. When the job finishes, go to the SSH session and run the isi get -D
/ifs/marketing/mktg-share/mydocuments/*.mp4 | grep "Disk
pools" command. Verify that the policy and disk pool is media_pool for all
the .mp4 files.

Lab Guide - PowerScale Administration

Page 236 © Copyright 2020 Dell Inc.


File Filtering

File Filtering

Scenario:

A problem with the last storage system was the large amount of capacity
consumption due to individuals storing personal pictures on the shares. The IT
manager wants to ensure that users cannot use storage for specific files types
within specific shares. Use the file filtering feature to prevent certain files from
consuming storage in a share.

Given in the lab exercise is the information needed to configure file filtering. If
needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, perform the following tasks:


• Configure file filtering for an SMB share

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 237
File Filtering

File Filtering
1. Use the information given below to add and verify a file filter on a SMB share.

a. Add a file filter to prevent users from writing JPEG image files on the
marketing general purpose share (mktg-share). Edit the share using
the Window sharing (SMB) page of the WebUI or the isi smb
shares command.

i. File Filter Enabled: yes

ii. File Extensions: .jpg

iii. File Filter Type: deny

b. Verify the file filter on mktg-share.

i. Copy the M & E folder from the File-Repository directory to


the mapped mktg-share. Skip the items that are restricted by
the copy operation.

Question: Why is there an access denied message during the


copy operation?

Instructor Note: As some files in the the M & E folder are .jpg files,
the filter added on the share prevents them from being copied.

ii. Compare the File-Repository > M & E folder with the mktg-
share > M & E folder.

Lab Guide - PowerScale Administration

Page 238 © Copyright 2020 Dell Inc.


File Filtering

WebUI Step-by-Step Walk Through: Configure File Filtering


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Add a file filter to prevent users from writing JPEG image files on the
marketing general purpose share.

a. Navigate to Protocols, Windows sharing (SMB) page, set access


zone to marketing. On mktg-share, click View/Edit and click Edit
SMB share.

b. In the Edit SMB share details window, go to the File filter section
and check Enable file filters. Add the file extension .jpg as shown
and then save the changes.

3. Verify the file filter on mktg-share.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 239
File Filtering

a. Map the mktg-share, if not already mapped. Use Windows Explorer


to copy the M & E folder from the File-Repository directory to the
mapped mktg-share.

b. The user is notified with an access denied message when trying to


store JPEG files to the share. Select the checkbox and click Skip.

c. Compare the File-Repository > M & E folder with the mktg-share >
M & E folder. Notice that the JPEG files did not copy over from the
Sat Images folders, but other files such as the Thumbs.db are
copied successfully.

4. Similarly, you can add file filters to an access zone in the Access, File filter
page of the WebUI. The file filter on an SMB shares takes precedence over
the filter filter on the access zone where the share resides.

Lab Guide - PowerScale Administration

Page 240 © Copyright 2020 Dell Inc.


File Filtering

CLI Step-by-Step Walk Through: Configure File Filtering


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Add a file filter to prevent users from writing JPEG image files on the
marketing general purpose share.

a. At the boston-1 prompt, run the isi smb shares modify mktg-
share --zone=marketing --file-filtering-enabled=yes
--file-filter-extensions=.jpg --file-filter-
type=deny command.

b. Verify by running the isi smb shares view mktg-share --


zone marketing | grep "File Filter" command.

3. Verify the file filter on mktg-share.

a. Map the mktg-share, if not already mapped. Use Windows Explorer


to copy the M & E folder from the File-Repository directory to the
mapped mktg-share.

b. The user is notified with an access denied message when trying to


store JPEG files to the share. Select the checkbox and click Skip.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 241
File Filtering

c. Compare the File-Repository > M & E folder with the mktg-share >
M & E folder. Notice that the JPEG files did not copy over from the
Sat Images folders, but other files such as the Thumbs.db are
copied successfully.

4. Similarly, you can add file filters to an access zone using the isi file-
filter settings modify command. The file filter on an SMB shares
takes precedence over the filter filter on the access zone where the share
resides.

Lab Guide - PowerScale Administration

Page 242 © Copyright 2020 Dell Inc.


SmartQuotas

SmartQuotas

Scenario:

A portion of the storage capacity of the sales general purpose directory will be
allocated to each user of the directory. The IT manager has asked you to use
quotas to enforce storage limits. You will start by setting up report generation and
event notifications. Next, create a directory type quota and apply user quotas to the
general purpose directory. Ensure to test the settings.

Given in the lab exercise is the information needed to configure SmartQuotas. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Report generation and event notification
• Add a directory type quota to a directory
• Add default user quota to a directory
• Test quota directory
• Edit default user quotas

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 243
SmartQuotas

SmartQuotas
1. Use the following information to change the global quota reporting frequency
and notification rules.

a. Activate SmartQuotas license. For the lab environment, you will use
the trial license functionality.

b. Change the frequency of the scheduled reports. Use the


SmartQuotas page of the WebUI or the isi quota settings
reports command.

i. Schedule: Run multiple policies every 2 minutes everyday.

c. Add the global notification rules for quotas. Use the SmartQuotas
page of the WebUI or the isi quota settings notifications
command.

i. Notification rule types: soft limit exceeded, hard limit


exceeded, hard - write access denied.

ii. Notify owner: yes

iii. Email: [email protected]

iv. Notification delay (where applicable): No delay

v. Schedule (where applicable): Run multiple policies every 5


minutes everyday.

2. Use the following information to configure directory type quotas and default-
user quotas on the general purpose sales directory.

a. Create a general purpose share for the sales access zone. Use the
Windows sharing (SMB) page of the WebUI or the isi smb
shares command.

i. Share Name: sales-gen

ii. Path: /ifs/sales/sales-gen

iii. Create SMB share directory: Yes

Lab Guide - PowerScale Administration

Page 244 © Copyright 2020 Dell Inc.


SmartQuotas

iv. Directory ACLs: Apply Windows Default ACLs

v. Permissions: Set permissions so Everyone has full access

b. Using Windows Explorer, map the \\sales\sales-gen share.

c. Add a directory type quota on the /ifs/sales/sales-gen directory. Use


the SmartQuotas page of the WebUI or the isi quota quotas
command.

i. Quota Type: Directory

ii. Target Directory Path: /ifs/sales/sales-gen

iii. Soft Limit: 300 MB

iv. Soft Limit Grace Period: 30 minutes

v. Hard Limit: 400 MB

vi. Show available space: Soft or Hard limit threshold

d. Add the default-user quota on the /ifs/sales/sales-gen directory. Use


the SmartQuotas page of the WebUI or the isi quota quotas
command.

i. Quota Type: Default-user

ii. Target Directory Path: /ifs/sales/sales-gen

iii. Hard Limit: 10 MB

e. Test the quotas on the /ifs/sales/sales-gen directory.

i. Using Windows Explorer, copy the File-Repository > M & E >


Sat Images folder to the mapped sales-gen share.

Question: Is the copy operation successful? Why or Why not?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 245
SmartQuotas

Instructor Note: No, because the folder size is larger than the hard
limit enforced on the user.

ii. Observe the reports generated. Use the SmartQuotas page of


the WebUI or the isi quota reports command.

Question: Why are reports generated every 2 minutes?

Instructor Note: The quotas are configured with the global reporting
settings which schedule reports every 2 minutes of everyday.

iii. View the list of all quotas. Use the SmartQuotas page of the
WebUI or the isi quota quotas command.

Question: Why is a quota listed for user John?

Instructor Note: The default-user quota automatically creates a


quota for all users of the target directory.

f. Edit the quotas for default-user and for a specific user.

i. Change the hard limit enforced on user John to 200 MB. Use
the SmartQuotas page of the WebUI or the isi quota
quotas command.

Hint: To edit a quota on a specific user, ensure to first remove


its existing link with the default-user quota.

ii. Using Windows Explorer, copy the File-Repository > M & E >
Sat Images folder to the mapped sales-gen share.

Lab Guide - PowerScale Administration

Page 246 © Copyright 2020 Dell Inc.


SmartQuotas

Question: Is the copy operation successful? Why or Why not?

Instructor Note: Yes, because the folder size is smaller than the hard
limit enforced on user John.

iii. Change the hard limit enforced on all users to 250 MB by


changing the setting on the default-user quota. Use the
SmartQuotas page of the WebUI or the isi quota quotas
command.

Question: Is the hard limit updated for user John? Why or Why
not?

Instructor Note: No, because user john is no longer linked to the


default-user quota and has a specific quota setting. Any specific user
quotas that are configured take precedence over a default user quota.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 247
SmartQuotas

WebUI Step-by-Step Walk Through: Report Generation


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Activate the SmartQuotas license.

a. Navigate to Cluster Management, Licensing page. Check the


SmartQuota license status. If the status is inactive, scroll down and
click Manage trials. Add the trial version for the purpose of this lab
exercise.

b. Navigate to the Licensing page, Software licenses overview table.


Ensure that the Status of SmartQuotas is set as Evaluation.

Lab Guide - PowerScale Administration

Page 248 © Copyright 2020 Dell Inc.


SmartQuotas

3. Change the frequency of the quota reports.

a. Navigate to the File System, SmartQuotas page. Click the Settings


tab and review the scheduled reporting options.

b. Enter the schedule as shown for Scheduled reporting.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 249
SmartQuotas

c. Leave the Manual reporting section and the Email mapping section
with its default settings.

Lab Guide - PowerScale Administration

Page 250 © Copyright 2020 Dell Inc.


SmartQuotas

4. Add the global notification rules for quotas.

a. To add each notification rule given below, under the Notification


rules section, click the Add a notification rule button.

b. Add notification rule for Soft limit exceeded as shown.

c. Add notification rule for Hard limit exceeded as shown.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 251
SmartQuotas

d. Add notification rule for Hard limit denied as shown.

5. Once done, scroll to the bottom of the page and click Save changes.

Lab Guide - PowerScale Administration

Page 252 © Copyright 2020 Dell Inc.


SmartQuotas

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 253
SmartQuotas

CLI Step-by-Step Walk Through: Report Generation


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate the SmartQuotas license.

a. At the boston-1 prompt, run the isi license add --


evaluation SmartQuotas command. Press ENTER and at the :
prompt, type q. To agree to the EULA, type yes and press ENTER.

b. Verify by running the isi license list command.

3. Change the frequency of the quota reports. At the boston-1 prompt, run the
following commands:

a. Modify Scheduled Reporting: isi quota settings reports


modify --schedule "Every 1 day every 2 minutes
between 12:00 AM and 11:59 PM"

b. Verify: isi quota settings reports view

4. Add the global notification rules for quotas. At the boston-1 prompt, run the
following commands:

Lab Guide - PowerScale Administration

Page 254 © Copyright 2020 Dell Inc.


SmartQuotas

a. Add notification rule for Soft limit exceeded: isi quota


settings notifications create --threshold soft --
condition exceeded --action-email-owner yes --
action-email-address "[email protected]" --holdoff 0s

b. Add notification rule for Hard limit exceeded: isi quota


settings notifications create --threshold hard --
condition exceeded --action-email-owner yes --
action-email-address "[email protected]" --holdoff 0s

c. Add notification rule for Hard limit denied: isi quota


settings notifications create --threshold hard --
condition denied --action-email-owner yes --action-
email-address "[email protected]" --holdoff 0s

d. Verify: isi quota settings notifications list

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 255
SmartQuotas

WebUI Step-by-Step Walk Through: Configure Directory Quota


and Default-User Quota
1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Create a general purpose share for the sales access zone.

a. Navigate to Protocols, Windows sharing (SMB), sales access


zone. Click on Create an SMB share.

i. Enter the fields as shown. This is the share you will use for
auditing events. Once all the fields are entered click Create
Share.

Lab Guide - PowerScale Administration

Page 256 © Copyright 2020 Dell Inc.


SmartQuotas

b. Go to Windows Explorer and map the \\sales\sales-gen share and


then click Finish. Refer to the SMB Shares lab if you need the
detailed steps to map a Network Drive.

3. Add a directory type quota on the /ifs/sales/sales-gen directory.

a. Navigate to the File System, SmartQuotas page. Go to the Quota


and usage tab, and then click Create a quota.

b. Select the quota type as Directory quota and fill the other fields as
shown. Once done, click Create quota. A success message is
displayed on the Quota and usage tab.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 257
SmartQuotas

Lab Guide - PowerScale Administration

Page 258 © Copyright 2020 Dell Inc.


SmartQuotas

c. In the Quotas and usage table, click View/Edit for the directory and
review all of your settings. If you require a custom notification for this
quota, you can change the configuration in the Quotas & Usage
table.

d. In Windows Explorer, right-click the mapped sales-gen share, and


then click Properties. Note that the capacity is the quota soft limit you
configured. Close the Properties window.

4. Add the default-user quota on the /ifs/sales/sales-gen directory.

a. Navigate to the File System, SmartQuotas page. Go to the Quota


and usage tab, and then click Create a quota.

b. Select the quota type as User quota and fill the other fields as
shown. Once done, click Create quota. A success message is
displayed on the Quota and usage tab.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 259
SmartQuotas

Lab Guide - PowerScale Administration

Page 260 © Copyright 2020 Dell Inc.


SmartQuotas

c. Verify that the default-user has been added in the Quotas and usage
table.

5. Test the quotas on the /ifs/sales/sales-gen directory.

a. Open Windows Explorer and navigate to the File-Repository folder.


Copy the M & E > Sat Images folder to the mapped sales-gen share.
A Copy Item dialog box opens indicating there is not enough space
because the folder size is larger than the hard limit enforced on the
user. Close the dialog box.

b. View the generated reports. Navigate to File System, SmartQuotas,


Generated reports archive tab. Note the Report Generations listed
as per the schedule set in the global Scheduled reporting settings.
For more details on each report, click on View details.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 261
SmartQuotas

c. Navigate to the Quotas and Usage tab and note all the quotas listed.
Observe that a quota for user john is listed. The default-user quota
automatically creates a quota for user john.

6. Edit the quotas for default-user and for a specific user.

a. Edit the quota for user john. Navigate to the File System,
SmartQuotas, Quotas and usage tab. Find the user: Dees\john
linked entry. In order to edit this quota, you need to first remove its
link with the default-user quota. For the entry, click the Unlink
button.

b. Click the View/Edit button and then click Edit. Change the Hard limit
to 200 MB and click Save changes and close the window. You
should see a success message.

Lab Guide - PowerScale Administration

Page 262 © Copyright 2020 Dell Inc.


SmartQuotas

c. Using Windows Explorer, copy the File-Repository > M & E >Sat


Images folder to the mapped sales-gen share. The copy operation
will be successful as the folder size is lesser than the quota hard limit.

d. Next, update the quota for all users to 250 MB. On the Quotas and
usage tab, click on View/Edit for the default-user quota entry.
Update the hard limit to 250 MB and save the changes.

e. Notice the quotas on the Quotas and usage tab. The hard limit for
user john has not been updated because user john is not linked to the
default-user quota and has a specific quota setting. Any specific user
quotas that you configure take precedence over a default user quota.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 263
SmartQuotas

Lab Guide - PowerScale Administration

Page 264 © Copyright 2020 Dell Inc.


SmartQuotas

CLI Step-by-Step Walk Through: Configure Directory Quota and


Default-User Quota
1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create a general purpose share for the sales access zone.

a. Create Share: At the boston-1 prompt, run the isi smb shares
create sales-gen --zone=sales --
path=/ifs/sales/sales-gen --i=yes --create-path
command.

i. Change Permissions: At the boston-1 prompt, run the isi


smb shares permission modify sales-gen --
zone=sales --wellknown Everyone --permission-
type=allow --permission=full command.

3. Go to Windows Explorer and map the \\sales\sales-gen share and then click
Finish. Refer to the SMB Shares lab if you need the detailed steps to map a
Network Drive.

4. Add a directory type quota on the /ifs/sales/sales-gen directory.

a. To create the quota, at the boston-1 prompt, run the isi quota
quotas create /ifs/sales/sales-gen directory --
hard-threshold 400M --soft-threshold 300M --soft-
grace 30m --container yes command.

b. Verify by running the isi quota quotas list command. The


quota has a hard limit of 400MB and soft limit of 300MB. The soft
grace period is set to 30 minutes. The quota will use the global
notification rules.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 265
SmartQuotas

c. In Windows Explorer, right-click the mapped sales-gen share, and


then click Properties. Note that the capacity is the quota soft limit you
configured. Close the Properties window.

5. Add the default-user quota on the /ifs/sales/sales-gen directory.

a. To create the quota, at the boston-1 prompt, run the isi quota
quotas create /ifs/sales/sales-gen default-user --
hard-threshold 10M command.

b. Verify by running the isi quota quotas list command. The


quota has a hard limit of 10MB. The quota will use the global
notification rules.

6. Test the quotas on the /ifs/sales/sales-gen directory.

Lab Guide - PowerScale Administration

Page 266 © Copyright 2020 Dell Inc.


SmartQuotas

a. Open Windows Explorer and navigate to the File-Repository folder.


Copy the M & E > Sat Images folder to the mapped sales-gen share.
A Copy Item dialog box opens indicating there is not enough space
because the folder size is larger than the hard limit enforced on the
user. Close the dialog box.

b. View the generated reports by running the isi quota reports


list command. The reports are generated as per the schedule set in
the global Scheduled reporting settings.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 267
SmartQuotas

c. View all the quotas enforced by running the isi quota quotas
list command. Observe that a quota for user john is listed. The
default-user quota automatically creates a quota for user john.

7. Edit the quotas for default-user and for a specific user.

a. Edit the quota for user john. In order to edit this quota, you need to
first remove its link with the default-user quota. At the boston-1
prompt, run the isi quota quotas modify
/ifs/sales/sales-gen user --user "DEES\john" --
linked no command.

Lab Guide - PowerScale Administration

Page 268 © Copyright 2020 Dell Inc.


SmartQuotas

b. Change the hard limit to 200 MB by running the isi quota quotas
modify /ifs/sales/sales-gen user --user "DEES\john"
--hard-threshold 200M command.

c. Verify by running the isi quota quotas list command.

d. Using Windows Explorer, copy the File-Repository > M & E >Sat


Images folder to the mapped sales-gen share. The copy operation
will be successful as the folder size is lesser than the quota hard limit.

e. Next, update the quota for all users to 250 MB. Run the isi quota
quotas modify /ifs/sales/sales-gen default-user --
hard-threshold 250M command.

f. Verify by running the isi quota quotas list command. The


hard limit for user john has not been updated because user john is no
more linked to the default-user quota and has a specific quota
setting. Any specific user quotas that you configure take precedence
over a default user quota.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 269
SmartDedupe

SmartDedupe

Scenario:

Another problem with the last storage system was the large amount of storage
consumed by duplicate data. The IT manager wants you to run a deduplication
assessment to verify you can assess space savings, specify deduplication settings,
and view space savings. Also, view the deduplication report.

Given in the lab exercise is the information needed to configure SmartDedupe. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Specify deduplication settings
• Assess space savings
• Run deduplication

Lab Guide - PowerScale Administration

Page 270 © Copyright 2020 Dell Inc.


SmartDedupe

SmartDedupe
1. Use the following information to configure SmartDedupe and deduplicate the
marketing general purpose share.

a. Activate the SmartDedupe license. For the lab environment, you will
use the trial license functionality.

b. Ensure that the Animation, M & E, and mydocuments directories


are present in the mapped mktg-share directory.

i. Using Windows Explorer, copy mydocuments from File-


Repository to the /ifs/marketing/mktg-share/Animation
directory.

c. Configure SmartDedupe settings. Use the Deduplication page of the


WebUI or the isi dedupe settings command.

i. Deduplication Directory: /ifs/marketing/mktg-share

ii. Deduplication Assessment Directory: /ifs/marketing/mktg-


share

d. Run deduplication assessment on the mktg-share directory and


check the report.

i. Start the DedupeAssessment job with its default values. Use


the Job operations page of the WebUI or the isi job jobs
command.

ii. View the report and note the space savings. Use the
Deduplication page of the WebUI or the isi dedupe
reports command.

Question: If multiple directories are assessed, are disk


savings differentiated by directory in the deduplication report?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 271
SmartDedupe

Instructor Note: No, the space savings are reported as one


combined value.

e. Run deduplication on the mktg-share directory.

i. Start the Dedupe job with its default values. Use the Job
operations page of the WebUI or the isi job jobs
command.

ii. Check the deduplication stats and note the amount of disk
space saved. Use the Deduplication page of the WebUI or the
isi dedupe command.

iii. View the report and note the space savings. Use the
Deduplication page of the WebUI or the isi dedupe
reports command.

Question: Under what conditions may two or more identical


files in a directory not be deduplicated?

Instructor Note: Identical files are deduplicated only when the files or
identical 8K blocks are stored in the same node pool and have the
same protection policy.

Lab Guide - PowerScale Administration

Page 272 © Copyright 2020 Dell Inc.


SmartDedupe

WebUI Step-by-Step Walk Through: Configure Deduplication


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Activate the SmartDedupe license.

a. Navigate to Cluster Management, Licensing page. Check the


SmartDedupe license status. If the status is inactive, scroll down and
click Manage trials. Add the trial version for the purpose of this lab
exercise.

b. Ensure that the SmartDedupe license is set to Evaluation in the


Software licenses overview table.

3. Add contents to the mktg-share directory.

a. Map the mktg-share directory, if not already mapped. Ensure that the
Animation, M & E, and mydocuments directories are present as
shown. If not, copy the directories from the File-Repository directory
using Windows Explorer.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 273
SmartDedupe

b. For the purpose of this demonstration, make another copy of the


mydocuments directory from File-Repository and paste it in the
Animation directory as shown.

4. Configure SmartDedupe settings. In this demonstration, we will run


deduplication on the /ifs/marketing/mktg-share directory.

a. Navigate to the File System, SmartDedupe page. Select the


Settings tab.

Lab Guide - PowerScale Administration

Page 274 © Copyright 2020 Dell Inc.


SmartDedupe

b. Configure the mktg-share directory for deduplication and


deduplication assessment as shown. Click Save changes.

Note: If you assess multiple directories, disk savings are not


differentiated by directory in the deduplication report.

5. Run deduplication assessment on the mktg-share directory and check the


report. The assessment operation does not perform deduplication but provides
an estimate of the space savings when deduplication is performed.

a. Navigate to Cluster Management, Job operations page. Select the


Job types tab. In the Job types table, find the
DedupeAsssessment job, and then click Start job.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 275
SmartDedupe

b. On the Start a job dialog box, click Start job. A Job Start
Succeeded message displays briefly.

c. Click the Job summary tab. When the DedupeAssessment job


completes, the job is removed from the Active jobs table. This may
take a few minutes to complete.

d. Once the job completes, navigate to File system, SmartDedupe,


Summary tab.

e. Scroll down to the Deduplication assessment reports table. Click


View report for the most recent report. Note that it may take as much
as five minutes for the report to display in the table.

Lab Guide - PowerScale Administration

Page 276 © Copyright 2020 Dell Inc.


SmartDedupe

Note: Sometimes the savings reported are low in environments where


multiple node pools and protection policies are configured. Identical
files are deduplicated only when the files or identical 8K blocks are
stored in the same node pool and have the same protection policy.

6. Run deduplication on the mktg-share directory.

a. Navigate to Cluster Management, Job operations page. Select the


Job types tab. In the Job types table, find the Dedupe job, and then
click Start job.

b. On the Start a job dialog box, click Start job. A Job Start
Succeeded message displays briefly.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 277
SmartDedupe

c. Check the status of the job in the Summary tab. Once the job
completes, it will be removed from the Active jobs table. This may
take a few minutes to complete.

d. Once the job completes, navigate to File system, SmartDedupe,


Summary tab. View the amount of disk space saved in the
Deduplication savings section. Scroll down to the Deduplication
reports section and view the latest report.

Note: Deduplication is not efficient for all file types. For example,
media, PDFs, and zip files are not good candidates for deduplication

Lab Guide - PowerScale Administration

Page 278 © Copyright 2020 Dell Inc.


SmartDedupe

unless the files are heavily replicated in the same node pool. Typical
user files such as Microsoft Office files that are shared, modified, and
copied among users are good candidates for deduplication. A good
use case for deduplication is user home directories where hundreds
of users may typically keep multiple versions of the same files.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 279
SmartDedupe

CLI Step-by-Step Walk Through: Configure Deduplication


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate the SmartDedupe license.

a. At the boston-1 prompt, run the isi license add --


evaluation SmartDedupe command. Type q to skip through the
license. To agree to the EULA, type yes and press Enter.

b. Verify by running the isi license list command.

3. Add contents to the mktg-share directory.

a. Map the mktg-share directory, if not already mapped. Ensure that the
Animation, M & E, and mydocuments directories are present as
shown. If not, copy the directories from the File-Repository directory
using Windows Explorer.

Lab Guide - PowerScale Administration

Page 280 © Copyright 2020 Dell Inc.


SmartDedupe

b. For the purpose of this demonstration, make another copy of the


mydocuments directory from File-Repository and paste it in the
Animation directory as shown.

4. Configure SmartDedupe settings. In this demonstration, we will run


deduplication on the /ifs/sales/mktg-share directory.

a. Configure the deduplication path. At the boston-1 prompt, run the


isi dedupe settings modify --paths
/ifs/marketing/mktg-share command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 281
SmartDedupe

b. Configure the deduplication assessment path. At the boston-1


prompt, run the isi dedupe settings modify --assess-
paths /ifs/marketing/mktg-share command.

Note: If you assess multiple directories, disk savings are not


differentiated by directory in the deduplication report.

c. Verify by running the isi dedupe settings view command.

5. Run deduplication assessment on the mktg-share directory and check the


report. The assessment operation does not perform deduplication but provides
an estimate of the space savings when deduplication is performed.

a. To run the assessment, at the boston-1 prompt, run the isi job
jobs start DedupeAssessment command.

b. To check the job status, run the isi job jobs list command to
display the active jobs list. Once the job completes, it will no longer be
present in the list. Run the command every few seconds to check if
the job is finished. This may take a few minutes to complete.

c. Once the job finishes, view the report generated. We need the job ID
to view the report. Run the isi dedupe reports list command
to get the job ID. Replace the ID in the isi dedupe reports
view <ID> command to view the report. Note that it may take as
much as five minutes for the report to display in the list.

Lab Guide - PowerScale Administration

Page 282 © Copyright 2020 Dell Inc.


SmartDedupe

Note: Sometimes the savings reported are low in environments where


multiple node pools and protection policies are configured. Identical
files are deduplicated only when the files or identical 8K blocks are
stored in the same node pool and have the same protection policy.

6. Run deduplication on the mktg-share directory.

a. To run deduplication, at the boston-1 prompt, run the isi job


jobs start Dedupe command.

b. Check the job status by running the isi job jobs list
command. This may take a few minutes to complete.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 283
SmartDedupe

c. Once the job completes, view the amount of disk space saved by
running the isi dedupe stats command.

d. View the report generated. Run the isi dedupe reports list
command to get the job ID. Replace the ID in the isi dedupe
reports view <ID> command to view the report.

Note: Deduplication is not efficient for all file types. For example,
media, PDFs, and zip files are not good candidates for deduplication
unless the files are heavily replicated in the same node pool. Typical
user files such as Microsoft Office files that are shared, modified, and
copied among users are good candidates for deduplication. A good
use case for deduplication is user home directories where hundreds
of users may typically keep multiple versions of the same files.

Lab Guide - PowerScale Administration

Page 284 © Copyright 2020 Dell Inc.


SnapshotIQ

SnapshotIQ

Scenario:

The IT manager wants to ensure you can recover files from snapshots. Use
SnapshotIQ to access specific point in time copies of files and restore the data from
the snapshots.

Given in the lab exercise is the information needed to configure SnapshotIQ. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

Many of the steps need to be done in quick succession in order to see the
snapshot behavior. For this reason, it is suggested that you read through all the
steps for tasks 1 and 2 before you perform the steps.

In this lab, you perform the following tasks:


• Create snapshot schedule
• View Snapshots
• Access and restore previous versions of files

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 285
SnapshotIQ

SnapshotIQ
1. Create Snapshot Schedule.

a. Activate the trail SnapshotIQ license.

b. Create a Snapshot target directory. Use the Windows Explorer to


create a new directory named MySales in the mapped sales-gen
share. Ensure that the share is empty before creating the directory.

c. Create a snapshot schedule for the MySales directory. Use the


SnapshotIQ page of the WebUI or the isi snapshot schedules
command.

i. Schedule Name: MySnaps

ii. Snapshot Naming Pattern: MySales_%H:%M

iii. Path: /ifs/sales/sales-gen/MySales

iv. Snapshot Duration: 2 Hours

v. Schedule: Run multiple policies every 2 minutes of


everyday

Question: When a schedule policy is deleted manually, are the


snapshots deleted as well? Why or why not?

Instructor Note: No, because a service running the background


monitors the snapshots and does not allow them to be deleted or
removed until the snapshot meets its expiration time that was set in
the policy.

d. View the snapshots created. Use the SnapshotIQ page of the WebUI
or the isi snapshot snapshots command. In accordance with
the configured schedule, it could take up to 2-3 minutes for snapshots
to appear.

Question: What is the size of the snapshot compared to the target


directory when no data in the directory has been modified or deleted?

Lab Guide - PowerScale Administration

Page 286 © Copyright 2020 Dell Inc.


SnapshotIQ

Instructor Note: Snapshots are pointer-based and therefore will use


a fraction of the space that the directory data uses.

2. Create Snapshots. Perform this step using the OneFS CLI and Windows
Explorer.

a. Create multiple point-in-time versions for a file using CLI. Use the
date > filename command.

i. Create a file named snapfile which contains the current


timestamp.

ii. Append the current timestamp to snapfile every 2 minutes for


a minimum of 4-5 times.

iii. Delete snapfile using the rm command.

iv. After 2-3 minues, create snapfile once again with the current
timestamp.

b. View the amount of space that the snapshot uses after data is
modified. Use the SnapshotIQ page of the WebUI or the isi
snapshot snapshots command.

3. Restore files from Snapshots. This step can be performed only using the
OneFS CLI and Windows Explorer.

a. Restore snapshots from the .snapshot directory. Use the cp


command.

i. Navigate to the /ifs/sales/sales-gen/MySales/.snapshot


directory in the CLI.

ii. The subdirectories in the .snapshot folder indicate the


different point in time versions of the target MySales directory.
Navigate into the subdirectory you wish to restore the file from
using the CLI.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 287
SnapshotIQ

iii. Copy snapfile in the subdirectory into the present directory


with the name old-snapfile.

iv. Verify the contents in old-snapfile.

b. Recover an earlier version of a file using Windows Explorer.

i. Navigate to the /ifs/sales/sales-gen/MySales directory using


Windows Explorer.

ii. Open the Properties window for snapfile.

iii. Use the Open, Copy and Restore operations to restore earlier
versions of snapfile.

iv. Verify the contents of the restored files.

Lab Guide - PowerScale Administration

Page 288 © Copyright 2020 Dell Inc.


SnapshotIQ

WebUI Step-by-Step Walk Through: Create Snapshot Schedule


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Activate the trail SnapshotIQ license.

a. Navigate to Cluster management, Licensing page. At the bottom of


the page, select Manage trials. Next, check SnapshotIQ and click
Start trial.

b. Verify the status of the license in the overview table.

3. Create a Snapshot target directory.

a. Map the sales-gen share, if not already mapped. Open the mapped
sales-gen share. Delete all contents in the directory, if any.

b. Right-click in the window create a new folder named MySales.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 289
SnapshotIQ

4. Create a snapshot schedule for the MySales directory.

a. Navigate to Data protection, SnapshotIQ page. Click each tab on


the page and review SnapshotIQ capabilities.

b. Go to the Snapshot Schedules tab and click the Create a schedule


button. Fill in the details as shown. For demonstration purposes, a 2
minute policy is used. This may not be realistic for many workflows.
Once done, click Create schedule.

Lab Guide - PowerScale Administration

Page 290 © Copyright 2020 Dell Inc.


SnapshotIQ

c. After the snapshot schedule is created, in the Schedules section,


click View/Edit to review the settings for the new schedule.

Tip: When creating a snapshot policy, keep in mind the length of time that you want
to set for expiration of the snapshots. If you are taking a snapshot every two
minutes as you do in the lab, you may not want to keep each snapshot for more
than two hours. If you use a setting that takes a snapshot every few days, then you
may want to set the expiration time so that you have at least one saved snapshot
when the next snapshot is taken. If you manually delete the policy, the snapshots
are not deleted because a service running in the background monitors the
snapshots and does not allow them to be deleted or removed until the expiration
time that you set in the policy.

5. Go to the Snapshots tab. You should begin to see snapshots. The snapshots
do not consume any space until data has been changed or deleted. In
accordance with the configured schedule, it could take up to 2-3 minutes for

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 291
SnapshotIQ

snapshots to appear.

Tip: Click on another tab and then back to the Snapshots tab to refresh the
Snapshots table.

Lab Guide - PowerScale Administration

Page 292 © Copyright 2020 Dell Inc.


SnapshotIQ

CLI Step-by-Step Walk Through: Create Snapshot Schedule


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate the trail SnapshotIQ license. At the boston-1 prompt run the following
commands:

a. License: isi license add --evaluation SnapshotIQ

b. Verify: isi license list

3. Create a Snapshot target directory.

a. Map the sales-gen share, if not already mapped. Open the mapped
sales-gen share. Delete all contents in the directory, if any.

b. Right-click in the window create a new folder named MySales.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 293
SnapshotIQ

4. Create a snapshot schedule for the MySales directory.

a. At the boston-1 prompt, run the isi snapshot schedules


create MySnaps /ifs/sales/sales-gen/MySales
MySales_%H:%M "Every 1 day every 2 minutes" --
duration 2H command. For demonstration purposes, a 2 minute
policy is used. This may not be realistic for many workflows

b. Verify by running the isi snapshot schedules view MySnaps


command.

Lab Guide - PowerScale Administration

Page 294 © Copyright 2020 Dell Inc.


SnapshotIQ

Tip: When creating a snapshot policy, keep in mind the length of time that you want
to set for expiration of the snapshots. If you are taking a snapshot every two
minutes as you do in the lab, you may not want to keep each snapshot for more
than two hours. If you use a setting that takes a snapshot every few days, then you
may want to set the expiration time so that you have at least one saved snapshot
when the next snapshot is taken. If you manually delete the policy, the snapshots
are not deleted because a service running in the background monitors the
snapshots and does not allow them to be deleted or removed until the expiration
time that you set in the policy.

5. Run the isi snapshot snapshots list -v command. You should


begin to see snapshots. The snapshots do not consume any space until data
has been changed or deleted. In accordance with the configured schedule, it
could take up to 2-3 minutes for new snapshots to appear.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 295
SnapshotIQ

Step-by-Step Walk Through: Create Snapshots


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Create multiple point-in-time versions for a file using CLI.

a. Navigate to the MySales directory by executing the cd


/ifs/sales/sales-gen/MySales command.

b. Create a file named snapfile which contains the current time. At the
boston-1 prompt, run the date > snapfile command. This
command writes the current timestamp to the file.

c. Navigate to the share folder that was mapped and verify that snapfile
is created. Open the file with Notepad and view its contents.

d. Again, in the CLI, wait for 2 minutes and run the date >>
snapfile command to append the latest timestamp to the end of the
existing file.

TIP: Use inline commands boston-1# while true; do; date


>> snapfile; sleep 120; done to append the file
automatically. Use CTRL-C to stop the script.

Lab Guide - PowerScale Administration

Page 296 © Copyright 2020 Dell Inc.


SnapshotIQ

e. In the share, open the file and view its contents after the edits. For
demonstration purposes, append the file 4-5 times. Note the time
each time you append to the file.

f. Remove the snapshot file. Run the rm snapfile command and


enter y to delete the file. Take note of the time when you delete the
file. Later you will be able to access earlier versions of the file using
snapshots.

g. After 2-3 minutes, run the date > snapfile to recreate the file.
The contents will only include the current time at which you created
the file.

3. View the amount of space that the snapshot uses after data is modified. You
may perform this step either using the WebUI or the CLI.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 297
SnapshotIQ

a. WebUI option: Open a Chrome browser and launch the WebUI


(https://192.168.3.11:8080). Login to the cluster using
root/Dees12345!

i. Navigate to Data protection, SnapshotIQ, Snapshots and


review the snapshots created.

b. CLI option: At the boston-1 prompt, run the isi snapshot


snapshots list -v command.

c. The amount of space consumed by the edits made in this lab is


minimal.

Lab Guide - PowerScale Administration

Page 298 © Copyright 2020 Dell Inc.


SnapshotIQ

Step-by-Step Walk Through: Restore files from Snapshots


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Restore snapshots from the .snapshot directory.

a. Ensure that the working directory is /ifs/sales/sales-gen/MySales by


running the pwd command. If not, run the cd /ifs/sales/sales-
gen/MySales command.

b. At the boston-1 prompt, run the ls -al command. Notice that the
.snapshot directory is not seen. It is a hidden directory but can be
accessed.

c. Access the .snapshot directory of the /ifs/sales/sales-gen/MySales


by running the cd .snapshot command.

d. Run the pwd command and notice that the present working directory
is .snapshot directory.

e. List the contents of the .snapshots directory by running the ls -alF


command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 299
SnapshotIQ

f. You should see a subdirectory here for each snapshot which has
been taken (one every two minutes). In accordance with the snapshot
schedule you created earlier in this lab, the directory names should
be MySales_<timestamp>. Take note of the timestamps in each
directory name. The contents of these snapshot directories are in a
read only state. Earlier versions of files can be copied from the
snapshot directories, but files in the directories are in a read only
state. They cannot be edited or modified.

g. Copy an earlier version of a file back from one of the snapshot


directories via the CLI. For the demonstration, the snapfile from
snapshot MySales_07:10 is copied. Use the cd MySales_07:10
command to navigate into the snapshot subdirectory.

h. Copy the earlier version of the file from the snapshot into the present
directory. Rename the file to old-snapfile by running the cp
snapfile /ifs/sales/sales-gen/MySales/old-snapfile
command.

i. Go back to the share and verify if the file is recovered. Open the file
and review the contents of the file.

Lab Guide - PowerScale Administration

Page 300 © Copyright 2020 Dell Inc.


SnapshotIQ

3. Recover an earlier version of a file using Windows Explorer.

a. Using Windows Explorer, open the mapped sales-gen share and


navigate to the MySales directory. Right-click on snapfile and click
Properties.

b. In the Properties window, select the Previous Versions tab. Each


version of the file represents a point in time view of the file created by
the snapshot. You have the option to Open the file, Copy this point in
time view of the file, or Restore the file in the present directory to the
point in time view.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 301
SnapshotIQ

c. Select one of the earlier versions. For the demonstration, the snapfile
from time 07:06 is selected. Click on Open. The earlier version of the
file will be displayed. Review the date information placed into this
point in time view of the file and close the file.

Lab Guide - PowerScale Administration

Page 302 © Copyright 2020 Dell Inc.


SnapshotIQ

d. To copy the file, select the file and click Copy. For the
demonstration, the snapfile from time 07:06 is selected. Select your
desktop as the save location.

e. Navigate to the desktop and verify that the earlier version of the file is
present.

f. To restore the original file, open the Previous Versions tab in the
Properties window. Select the version of the file to restore. For the
demonstration, the snapfile from time 07:08 is selected. Click
Restore. Click Restore again to restore the file. Click OK in the
success window. Close the Properties window.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 303
SnapshotIQ

g. In the share, open snapfile and verify that it has been restored to the
previous version. Close the file.

h. Click OK to close the Properties window.

Lab Guide - PowerScale Administration

Page 304 © Copyright 2020 Dell Inc.


SyncIQ

SyncIQ

Scenario:

The Engineering business unit has requested a general use data set to test against
their application development effort. The IT manager has asked you to configure
SyncIQ to copy "real-type" data to the engineering group. Use this document as
part of your presentation to the team who are not familiar with the way SyncIQ
works.

The task covers how to create a SyncIQ policy, run the SyncIQ policy, and edit
SyncIQ policy. Also, re-run the policy and view the updated results to achieve the
SyncIQ test.

Given in the lab exercise is the information needed to configure SyncIQ. If needed,
use the WebUI or the CLI step-by-step walk through portion of the exercise for
guidance.

In this lab, perform the following tasks:


• Create SyncIQ policy
• Run SyncIQ policy and view results
• Edit SyncIQ policy
• Run modified SyncIQ policy and view results

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 305
SyncIQ

SyncIQ
1. Use the following information to create and run a SyncIQ policy to copy data
from the marketing general purpose to a target directory in the engineering
access zone.

a. Activate SyncIQ license. For the lab environment, you will use the
trial license functionality.

b. Create target directory for the replication in the engineering access


zone. Use the File system explorer page of the WebUI or the mkdir
command.

i. Directory name: targetCopy

ii. Path: /ifs/engineering

iii. Permissions: Ensure everyone has full control to the


directory

c. Ensure that the mapped mktg-share directory is not empty. If empty,


copy the M & E folder from the File-Repository directory using
Windows Explorer.

d. Create the SyncIQ policy. Use the SyncIQ page of the WebUI or the
isi sync policies command.

i. Policy name: MktgToEng

ii. Action: Copy

iii. Enabled: Yes

iv. Run job: Manually

v. Source root directory: /ifs/marketing/mktg-share

vi. Target host: engineering.dees.lab

vii. Target directory: /ifs/engineering/targetCopy

e. Run a policy assessment for the MktgToEng policy. Use the SyncIQ
page of the WebUI or the isi sync jobs command.

Lab Guide - PowerScale Administration

Page 306 © Copyright 2020 Dell Inc.


SyncIQ

f. View the report for the policy assessment. Use the SyncIQ page of
the WebUI or the isi sync reports command.

g. Run the MktgToEng policy. Use the SyncIQ page of the WebUI or
the isi sync jobs command.

h. Compare the contents of the /ifs/engineering/targetCopy directory


to the /ifs/marketing/mktg-share directory and verify that the copy
was successful.

2. Use the following information to modify and test the SyncIQ policy created in
the previous step.

a. Modify the MktgToEng policy to run whenever the source is modified.


Use the SyncIQ page of the WebUI or the isi sync policies
command.

b. Test the updated MktgToEng policy.

i. Copy the legal discovery directory present in the File-


Repository directory to the mapped mktg-share directory
using Windows Explorer.

ii. Verify that the policy runs automatically after the copy
operation and view the report. Use the SyncIQ page of the
WebUI or the isi sync reports command.

iii. View the contents of the /ifs/engineering/targetCopy


directory.

c. Revoke the Write permission for Group on the


/ifs/engineering/targetCopy directory. Use the File system explorer
page of the WebUI or the chmod command.

Question: Is the permission change operation successful? Why or


Why not?

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 307
SyncIQ

Instructor Note: No, because the replicated directory is read-only


and can only be accessed by the SyncIQ process. In order to write to
the replicated directory, we need to make it independent from the
source.

Lab Guide - PowerScale Administration

Page 308 © Copyright 2020 Dell Inc.


SyncIQ

WebUI Step-by-Step Walk Through: Create and Run SyncIQ policy


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Activate the SyncIQ license.

a. Navigate to Cluster Management, Licensing page. Check the


SyncIQ license status. If the status is inactive, scroll down and click
Manage trials. Add the trial version for the purpose of this lab
exercise.

b. Ensure that the status for SyncIQ changes to Evaluation in the


Software licenses overview table.

3. Create target directory targetCopy for the replication. In this exercise, we will
replicate the mktg-share directory to the targetCopy directory in the
engineering access zone.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 309
SyncIQ

a. Map the mktg-share directory, if not already mapped. Ensure that the
directory is not empty. If empty, copy the M & E folder from the File-
Repository directory using Windows Explorer.

b. On the WebUI, navigate to the File system, File system explorer


page. Set the access zone to engineering.

c. Click Create directory and enter the details as shown.

4. Create the SyncIQ policy.

a. Navigate to the Data protection, SyncIQ page. Select the Policies


tab and click Create a SyncIQ policy.

Lab Guide - PowerScale Administration

Page 310 © Copyright 2020 Dell Inc.


SyncIQ

b. Enter the information as shown in the graphic. Keep all other fields
with the default setting.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 311
SyncIQ

c. Navigate to the Settings tab and review the default settings. Do not
modify these settings without assistance from PowerScale Technical
Support.

5. Run a policy assessment for the MktgToEng policy.

a. On the Policies tab, click More in the Actions column for the
MktgToEng policy, and then select Assess sync.

b. The Assess sync should take less than a minute. Navigate to the
Summary tab and notice the Running status in the Active jobs list.
Once the job completes, it will no longer be listed in the Active jobs
list.

c. Navigate to the Reports tab and view the report, including the
duration, total files, and total data transferred. The policy assessment
did not actually transfer the files, but it provides an estimate of
duration and data to be copied before the first run of the policy.

Lab Guide - PowerScale Administration

Page 312 © Copyright 2020 Dell Inc.


SyncIQ

6. Run the MktgToEng policy and test the results.

a. On the Policies tab, click More in the Actions column for the
MktgToEng policy, and then select Start job. The SyncIQ job runs in
the background.

b. You may view the job status in the Active jobs table in the Summary
tab. Once the job completes, navigate to the Reports tab and view
the new report.

c. Navigate to File system, File system explorer. Set the access zone
to engineering. Expand the targetCopy directory. Compare the
contents with the /ifs/marketing/mktg-share directory and verify that
the copy was successful.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 313
SyncIQ

CLI Step-by-Step Walk Through: Create and Run SyncIQ policy


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate the SyncIQ license.

a. At the boston-1 prompt, run the isi license add --


evaluation SyncIQ command. Type q to skip through the license.
To agree to the EULA, type yes and press ENTER.

b. Verify by running the isi license list command.

3. Create target directory targetCopy for the replication. In this exercise, we will
replicate the mktg-share directory to the targetCopy directory in the
engineering access zone.

a. Map the mktg-share directory, if not already mapped. Ensure that the
directory is not empty. If empty, copy the M & E folder from the File-
Repository directory using Windows Explorer.

b. At the boston-1 prompt, run mkdir


/ifs/engineering/targetCopy to create the target directory.

c. Run the chmod 777 /ifs/engineering/targetCopy command


to ensure the directory has all permissions enabled.

4. Create the SyncIQ policy.

Lab Guide - PowerScale Administration

Page 314 © Copyright 2020 Dell Inc.


SyncIQ

a. At the boston-1 prompt, run the isi sync policies create


MktgToEng copy /ifs/marketing/mktg-share
engineering.dees.lab /ifs/engineering/targetCopy --
enabled yes command.

b. Verify by running the isi sync policies list command.

5. Run a policy assessment for the MktgToEng policy.

a. At the boston-1 prompt, run the isi sync jobs start


MktgToEng --test command to start the assessment job.

b. The job should take less than a minute to run. Run the isi sync
jobs view MktgToEng command to view the job status. Run the
command every 20 seconds until the job is no more listed. This
indicates that the job has completed.

c. To view the report, we first need the job ID. Run the isi sync
reports list command. Note the Job ID.

d. Replace the Job ID in the isi sync reports view MktgToEng


<Job ID> command to view the report, including the duration, total
files, and total data transferred. The policy assessment did not

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 315
SyncIQ

actually transfer the files, but it provides an estimate of duration and


data to be copied before the first run of the policy.

6. Run the MktgToEng policy and test the results.

a. To run the policy, at the boston-1 prompt, run the isi sync jobs
start MktgToEng command.

b. Run the isi sync jobs view MktgToEng command to view the
job status. Once done, check the report.

c. Get the job ID by running the isi sync reports list command.
Replace the Job ID in the isi sync reports view MktgToEng
<Job ID> command.

d. Run the ls /ifs/engineering/targetCopy command.


Compare the contents with the /ifs/marketing/mktg-share directory
and verify that the copy was successful.

Lab Guide - PowerScale Administration

Page 316 © Copyright 2020 Dell Inc.


SyncIQ

WebUI Step-by-Step Walk Through: Modify SyncIQ Policy


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Modify the MktgToEng policy.

a. Navigate to the Data protection, SyncIQ page. Select the Policies


tab. Click on View/Edit for the MktgToEng policy. Click Edit.

b. Change the policy to run whenever the source is modified. Leave the
rest of the fields unchanged. Click Save changes.

c. Note the success message and click Close.

3. Test the updated MktgToEng policy.

a. Add contents to the mktg-share directory. Open Windows Explorer


on the Jumpstation. Copy the legal discovery directory present in
the File-Repository directory to the mapped mktg-share directory.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 317
SyncIQ

b. On the WebUI, select the Summary tab on the SyncIQ page. You
may either see the job running in the Active jobs section or a report
generated in the SyncIQ recent reports section. View the report
once the job completes. The MktgToEng policy runs every time the
source directory is modified.

c. Navigate to the File system, File system explorer page. Set the
access zone to engineering and expand the targetCopy directory.
Verify that the legal discovery directory is present.

4. On the File system explorer page, click View/Edit for the targetCopy
directory. Click Edit and remove the Write permission for Group. Save the
changes. You will see an error indicating that you can't make changes to the
file system. This is because the replicated directory is read-only and only the
SyncIQ process can modify it.

Lab Guide - PowerScale Administration

Page 318 © Copyright 2020 Dell Inc.


SyncIQ

CLI Step-by-Step Walk Through: Modify SyncIQ Policy


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Modify the MktgToEng policy.

a. Change the policy to run whenever the source is modified. At the


boston-1 prompt, run the isi sync policies modify
MktgToEng --schedule when-source-modified command.

b. Verify by running the isi sync policies view MktgToEng


command.

3. Test the updated MktgToEng policy.

a. Add contents to the mktg-share directory. Open Windows Explorer


on the Jumpstation. Copy the legal discovery directory present in
the File-Repository directory to the mapped mktg-share directory.

b. Run the isi sync jobs view MktgToEng command to view the
job status. Once done, check the report using the isi sync

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 319
SyncIQ

reports view MktgToEng <Job ID> command. The


MktgToEng policy runs every time the source directory is modified.

c. Run the ls /ifs/engineering/targetCopy command. Verify


that the legal discovery directory is present.

4. Run the chmod 757 /ifs/engineering/targetCopy command. Notice


that there is an error indicating that the directory is read-only. The replicated
directory can only be modified by the SyncIQ process.

Lab Guide - PowerScale Administration

Page 320 © Copyright 2020 Dell Inc.


SmartLock

SmartLock

Scenario:

The IT manager wants to ensure that sensitive documents containing customer


information are not accidentally deleted or tampered during file operations. Use
SmartLock to commit files to a write once read many (WORM) state. Create a
WORM domain on a directory to test the SmartLock functionality.

Given in the lab exercise is the information needed to configure SmartLock. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Create an enterprise SmartLock domain
• Test the SmartLock domain

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 321
SmartLock

SmartLock
1. Use the following information to create a SmartLock domain on directory in the
marketing general purpose share.

a. Activate the SmartLock license. For the lab environment, you will use
the trial license functionality.

b. Create a empty target directory for SmartLock. Use the File system
explorer page of the WebUI or the mkdir command.

i. Directory name: SmartLock_Target

ii. Path: /ifs/marketing/mktg-share

iii. Permissions: Ensure everyone has full control to the


directory

c. Create a enterprise WORM domain for the SmartLock_Target


directory. Use the SmartLock page of the WebUI or the isi worm
domains command.

i. Domain Type: Enterprise

ii. Privileged Delete: Off

iii. Path: /ifs/marketing/mktg-share/SmartLock_Target

iv. Default Retention: 5 minutes

v. Auto-commit Offset: 1 second

d. Test the SmartLock domain on the /ifs/marketing/mktg-


share/SmartLock_Target directory.

i. Using Windows Explorer, create a new text document file in


the SmartLock_Target directory.

ii. Enter text into the file. Save the file and close. Reopen the file
and note the contents. Once done, try to delete the file.

Question: Were changes saved successfully? Did the file


delete successfully? Why or why not?

Lab Guide - PowerScale Administration

Page 322 © Copyright 2020 Dell Inc.


SmartLock

Instructor Note: No, because the file is committed to a WORM state


1 second after it is saved in the directory. The file is released only
after the retention period is complete. During the retention period, the
file is read-only.

iii. Wait for 5 minutes and try to delete the file.

Question: Under what conditions can you delete a file in an


enterprise WORM domain during the retention period?

Instructor Note: The file can be deleted during its retention period if
the privileged delete feature is enabled. To access the privilege delete
functionality, you must be assigned the
ISI_PRIV_IFS_WORM_DELETE privilege and own the file you are
deleting. You can also access the privilege delete functionality for any
file if you are logged in through the root or compadmin user account.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 323
SmartLock

WebUI Step-by-Step Walk Through: Create a SmartLock Domain


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Activate the SmartLock license. Add the trial version for the purpose of this
lab exercise.

a. Navigate to the Cluster Management, Licensing page. Check the


SmartLock license status. If the status is inactive, scroll down and
click Manage trials.

b. Ensure that the SmartLock license is set to Evaluation in the


Software licenses overview table.

3. Create a empty target directory for SmartLock.

a. Navigate to the File system, File system explorer page. Set the
access zone to marketing. Open the mktg-share directory. Click
Create directory and enter the fields as shown.

Lab Guide - PowerScale Administration

Page 324 © Copyright 2020 Dell Inc.


SmartLock

4. Create a enterprise WORM domain for the SmartLock_Target directory.

a. Navigate to the File system, SmartLock page. Click Create domain.


To confirm, click Create. For the purpose of this demonstration, let us
set the retention period to 5 minutes. Enter the fields as shown and
click Create domain.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 325
SmartLock

b. Verify that the domain is listed in the WORM domains table. Click
View/Edit for the created domain to verify the settings.

5. Test the SmartLock domain.

a. Map the mktg-share directory, if not already mapped. Open the


mktg-share using Windows Explorer. Open the SmartLock_Target
directory. Inside the window, right-click and select New > Text
Document. Leave the filename as default. Note the time when you
create the file.

Lab Guide - PowerScale Administration

Page 326 © Copyright 2020 Dell Inc.


SmartLock

b. Open the file using Notepad. Enter some text. Save the file and
close. Reopen the file and notice that the text you entered is not
saved.

c. Now, try to delete the file. You will get an error message saying that
the file cannot be deleted. This is because the file is committed to a
WORM state and will only be released after the retention period is
complete. During the retention period, the file is read-only.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 327
SmartLock

d. Try to delete the file, 5 minutes after it was created. The file will
successfully be deleted as the retention period since the last
modification has expired.

Lab Guide - PowerScale Administration

Page 328 © Copyright 2020 Dell Inc.


SmartLock

CLI Step-by-Step Walk Through: Create a SmartLock Domain


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Activate the SmartLock license. Add the trial version for the purpose of this
lab exercise.

a. At the boston-1 prompt, run the isi license add --


evaluation SmartLock command. Type q to skip through the
license. To agree to the EULA, type yes and press Enter.

b. Verify by running the isi license list command.

3. Create a empty target directory for SmartLock. At the boston-1 prompt, run
the following commands:

a. Create Directory: mkdir /ifs/marketing/mktg-


share/SmartLock_Target

b. Change Permissions: chmod 777 /ifs/marketing/mktg-


share/SmartLock_Target

4. Create a enterprise WORM domain for the SmartLock_Target directory.

a. At the boston-1 prompt, run the isi worm domains create


/ifs/marketing/mktg-share/SmartLock_Target --
autocommit-offset 1s --privileged-delete false --

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 329
SmartLock

default-retention 5m command. For the purpose of this


demonstration, let us set the retention period to 5 minutes.

b. Verify by running the isi worm domains view


/ifs/marketing/mktg-share/SmartLock_Target command.

5. Test the SmartLock domain.

a. Map the mktg-share directory, if not already mapped. Open the


mktg-share using Windows Explorer. Open the SmartLock_Target
directory. Inside the window, right-click and select New > Text
Document. Leave the filename as default. Note the time when you
create the file.

b. Open the file using Notepad. Enter some text. Save the file and
close. Reopen the file and notice that the text you entered is not
saved.

Lab Guide - PowerScale Administration

Page 330 © Copyright 2020 Dell Inc.


SmartLock

c. Now, try to delete the file. You will get an error message saying that
the file cannot be deleted. This is because the file is committed to a
WORM state and will only be released after the retention period is
complete. During the retention period, the file is read-only.

d. Try to delete the file, 5 minutes after it was created. The file will
successfully be deleted as the retention period since the last
modification has expired.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 331
HealthCheck

HealthCheck

Scenario:

The IT manager has emphasized the importance to proactively detect potential


issues in the cluster. As an administrator, familiarize yourself with the HealthCheck
framework to schedule and evaluate different cluster parameters.

Given in the lab exercise is the information needed to configure HealthCheck. If


needed, use the WebUI or the CLI step-by-step walk through portion of the
exercise for guidance.

In this lab, you perform the following tasks:


• Run a health check evaluation
• Create an evaluation schedule

Lab Guide - PowerScale Administration

Page 332 © Copyright 2020 Dell Inc.


HealthCheck

HealthCheck
1. Use the following information to perform health checks on different cluster
items.

a. View the different checklists. Use the HealthCheck page of the


WebUI or the isi healthcheck checklists command.

b. Run a health check to evaluate cluster capacity. Use the


HealthCheck page of the WebUI or the isi healthcheck
command.

c. Once the evaluation is complete, view the details to check for


warnings and failures. Use the HealthCheck page of the WebUI or
the isi healthcheck command.

d. Schedule a health check for multiple checklists. Use the


HealthCheck page of the WebUI or the isi healthcheck
schedules command.

i. Schedule name: MySchedule

ii. Checklists: nfs, ntp, smartconnect, smartpools, snapshot,


smb, synciq

iii. Schedule: Every 2 minutes everyday

e. Wait for 2 minutes and check the evaluation details for the scheduled
checklists. Use the HealthCheck page of the WebUI or the isi
healthcheck command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 333
HealthCheck

WebUI Step-by-Step Walk Through: Configure HealthCheck


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch the WebUI (https://192.168.3.11:8080). Login to
the cluster using root/Dees12345!

2. Run a health check to evaluate cluster capacity.

a. Navigate to the Cluster management, HealthCheck page. Select


the HealthChecks tab and view by HealthCheck lists. Note the
different checklists and their description.

b. Identify the cluster_capacity checklist from the table and click View
details. Note the list of items that will be evaluated in the checklist.
Once done, scroll to the bottom and click Close.

Lab Guide - PowerScale Administration

Page 334 © Copyright 2020 Dell Inc.


HealthCheck

c. For the cluster_capacity checklist, click More and select Run. Once
done, you will notice that the checklist has been queued for
evaluation. The evaluation may take a minute to complete.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 335
HealthCheck

d. Once complete, the Last run start time column for the checklist will
change to PASS or FAIL with a timestamp.

e. To view the details of the evaluation, select the Evaluations tab.


Click on View details for the most recent evaluation of the
cluster_capacity checklist. You may see a list of warnings and
failures. In this example, there are no warning or failures as all items
on the checklist passed the evaluation.

Lab Guide - PowerScale Administration

Page 336 © Copyright 2020 Dell Inc.


HealthCheck

3. Schedule a health check for multiple checklists.

a. Navigate to the Cluster management, HealthCheck page. Select


the Scheduler tab. Notice that there is a default schedule set every
day for the basic checklist. This checklist is a combination of
evaluations items from all the other checklists to evaluate the overall
health of the cluster.

b. Click on Create a new schedule. For the purpose of this


demonstration, we will run the schedule every 2 minutes daily. Enter
the fields as shown and click Save changes.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 337
HealthCheck

c. Wait for 2 minutes and check the Evaluations tab. Notice that the
checklists from the newly created schedule are either queued or
evaluated. Click View details to view the evaluation details for any of
the checklists.

Note: Failures will be listed due to the vmware environment.

Lab Guide - PowerScale Administration

Page 338 © Copyright 2020 Dell Inc.


HealthCheck

CLI Step-by-Step Walk Through: Configure HealthCheck


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Run a health check to evaluate cluster capacity.

a. At the boston-1 prompt, run the isi healthcheck checklists


list command. Note the different checklists and their description.

b. View the items that will be evaluated in the cluster_capacity


checklist by running the isi healthcheck checklists view
cluster_capacity command.

c. Run the isi healthcheck run cluster_capacity command


to run the evaluation. The evaluation may take a minute to complete.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 339
HealthCheck

d. Once done, view the evaluation details. To get the ID of the


evaluation, run the isi healthcheck list --format list |
grep 'cluster_capacity' command.

e. Replace the ID in the isi healthcheck view <ID> command.


You may see a list of warnings and failures. In this example, there are
no warning or failures as all items on the checklist passed the
evaluation.

3. Schedule a health check for multiple checklists.

a. At the boston-1 prompt, run the isi healthcheck schedules


list command. Notice that there is a default schedule set every day
for the basic checklist. This checklist is a combination of evaluations
items from all the other checklists to evaluate the overall health of the
cluster.

b. Create a schedule by running the isi healthcheck schedule


create MySchedule "Every 1 day every 2 minutes
between 12:00 AM and 11:59 PM" --checklist
ntp,smartconnect,smartpools,snapshot,smb,synciq,nfs
command. For the purpose of this demonstration, we will run the
schedule every 2 minutes daily.

c. Verify by running the isi healthcheck schedules view


MySchedule command.

Lab Guide - PowerScale Administration

Page 340 © Copyright 2020 Dell Inc.


HealthCheck

d. Wait for 2 minutes and run the isi healthcheck list command.
Notice that the checklists from the newly created schedule are either
queued or evaluated. Replace the ID in the isi healthcheck
view <ID> command to view the evaluation details.

Note: Failures will be listed due to the vmware environment.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 341
Monitoring

Monitoring

Scenario:

The IT manager wants to ensure you understand the monitoring tools. Both
InsightIQ and DataIQ are installed on stand-alone servers. Both applications are a
single point of monitoring for multiple PowerScale clusters in the data center.
DataIQ can monitor non-PowerScale volumes, InsightIQ can only monitor
PowerScale volumes.

Given in the lab exercise is the information needed to monitor the cluster using
DataIQ, InsightIQ and isi statistics. If needed, use the step-by-step walk
through portion of the exercise for guidance.

In this lab, you perform the following tasks:


• Create a performance baseline with InsightIQ
• Create a performance baseline
• Add the PowerScale cluster to the DataIQ application
• Gather metrics using isi statistics

Lab Guide - PowerScale Administration

Page 342 © Copyright 2020 Dell Inc.


Monitoring

Monitoring
1. Use the following information to perform the initial configuration for InsightIQ.

a. Enable the insightiq user account. Use the Membership and roles
page of the WebUI or the isi auth users command.

i. Enable account: yes

ii. Password: Dees12345!

b. Connect to InsightIQ and add the boston cluster.

i. URL: http://192.168.3.30

ii. Credentials: administrator/Dees12345!

iii. Local datastore: /datastore

iv. Cluster Address: 192.168.3.11

v. Username: insightiq

vi. Password: Dees12345!

c. Enable and configure the File System Analytics (FSA). Use the
SETTINGS page of the InsightIQ interface.

i. Generate FSA reports on the monitored cluster: yes

ii. Generate FSA reports in InsightIQ: yes

iii. Result Set Options settings: Default

iv. Take Snapshot: no

v. Result Set Retention settings: Default

2. Use to following information to view and create baseline reports on the boston
cluster.

a. Get baseline reports on the cluster. Use the Live Performance


Reporting page on the InsightIQ interface.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 343
Monitoring

i. View the report on Node Performance for a given period (start


of the course to the current date).

ii. View the report on Node Performance with a zoom level of 6


hours.

iii. Add a filter to report the Node Performance only for node 1.

Question: What is a common use case and value proposition


for administrators to use filters?

Instructor Note: Filters allows you to view or monitor a specific item.


If Node 1 were having performance issues, this live report would allow
you to filter through the metrics and just present the results from Node
1, thereby making it easier and faster to perform troubleshooting or
performance analytics.

iv. Note the different options available.

Question: Which button enables administrators to share their


report view with other administrators?

Instructor Note: PERMALINK

b. Create a custom performance report. Use the PERFORMANCE


REPORTING page on the InsightIQ interface.

i. Performance Report Name: Lab Performance Report Test

ii. Live Performance Reporting: yes

iii. Schedule Performance Report: yes, default values

iv. Performance Module Entity: Active clients

Lab Guide - PowerScale Administration

Page 344 © Copyright 2020 Dell Inc.


Monitoring

v. Entity Breakout: Protocol

vi. Performance Module Entity: Deduplication Summary


(Physical)

c. Generate cluster capacity reports. Use the Capacity Reporting page


of the InsightIQ interface.

i. View the capacity forecast. Plot the total usage.

ii. View the forecast data.

d. Create a data usage report showing the largest physical files. Use the
File System Analytics page of the InsightIQ interface.

i. View the data usage for any available FSA report.

ii. View the largest cluster file.

iii. View the data properties for any available FSA report.

iv. View the file type with the most files.

3. Use the following information to add the boston cluster to the DataIQ
application.

a. Create a NFS export to mount /ifs and add the DataIQ server as a
root client. Use the UNIX sharing (NFS) page of the WebUI or the
isi nfs exports command.

i. Root client: DataIQ server (192.168.3.60)

b. Launch the DataIQ application (https://192.168.3.60). Login using


administrator/Dees12345!

c. Add the boston cluster to the DataIQ application. Use the page
Settings > Data management configuration page.

i. FS type: NFS file system

ii. Volume name: PowerScale

iii. NFS share: 192.168.3.11:/ifs

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 345
Monitoring

iv. Scan Frequency: Every day, every 1 minute

d. View the directory details for /ifs. Use the Data Management page.

Question: How many directories are listed under /ifs?

e. View the directory details for /ifs/marketing. Use the Data


Management page.

f. Apply a rule to notify the DataIQ administrator when the


/ifs/marketing directory reaches 250 MB. Use the Data
Management page.

4. View the following cluster information using the isi statistics command.

a. View the most active clients accessing the cluster.

b. View the average client throughput.

c. View the clients connected to each node.

d. View the overall performance of the cluster and the performance of


each node.

e. View the performance per drive for the node you are logged into.

f. Review the drive information for all nodes.

g. View the read and writes by class.

h. View the performance for the top active results per node.

i. Show the keys options.

j. View the node uptimes.

k. View the detailed broken down cache reads and prefetches.

Lab Guide - PowerScale Administration

Page 346 © Copyright 2020 Dell Inc.


Monitoring

Step-by-Step Walk Through: InsightIQ Initial Configuration


1. On the Jumpstation, login as DEES\John (password: Dees12345!).

2. Enable the insightiq user account. The insightiq user is one of the accounts
automatically created by OneFS. By default the account is disabled. You may
either use the WebUI or the CLI to perform this step.

a. WebUI option: Open a Chrome browser and launch the WebUI


(https://192.168.3.11:8080). Login to the cluster using
root/Dees12345!

i. Navigate to the Access, Membership and roles page. Select


the System access zone. On the Users tab, choose FILE:
System from the Providers drop down menu.

ii. Locate the insightiq user and click View/Edit. Click Edit user.
Change the password to Dees12345! and enable the account
as shown. Once done, save the changes and close.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 347
Monitoring

b. CLI option: Open mRemoteNG from the taskbar. Select Bos-node1,


and SSH using root/Dees12345!

i. At the boston-1 prompt, run the isi auth users modify


insightiq --enabled yes --password Dees12345!
command.

ii. Verify by running the isi auth users view insightiq


command.

3. Connect to InsightIQ and add the boston cluster.

a. Open the Google Chrome web browser or open a new tab in the
current Chrome browser.

Lab Guide - PowerScale Administration

Page 348 © Copyright 2020 Dell Inc.


Monitoring

b. Connect to the InsightIQ application at http://192.168.3.30, where


192.168.3.30 is the IP address of the InsightIQ virtual appliance.

Note: To connect to the InsightIQ application by host name, you must


first configure a host name for the IP address in the DNS.

c. On the InsightIQ application login page, login using


administrator/Dees12345!

d. The one-time InsightIQ EULA page appears. Review the EULA, click I
have read and agree to..., and then click Submit.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 349
Monitoring

e. The first time you log in, you are prompted to configure the datastore.
For this demonstration, we use a local datastore (as opposed to a
remote datastore) in this implementation of InsightIQ. The local
datastore option is included by default with the InsightIQ virtual
appliance. If you want to place a datastore on a PowerScale storage
cluster or on a NFS-mounted server, you can specify the cluster or
server in this task.

f. Specify the path for the Local Datastore as /datastore and click
Submit.

g. Next, the Add Cluster dialog box appears. Set InsightIQ to monitor
the boston cluster. While in this lab, you will identify the cluster by an
IP address or a host name, alternatively you could specify the name
of a SmartConnect zone.

h. Enter the fields as listed and click OK. It will take a few minutes to
complete adding the cluster. Once done, the monitored cluster is
displayed in the SETTINGS page.

• Cluster Address: 192.168.3.11

• Username: insightiq

• Password: Dees12345!

4. Enable and configure the File System Analytics (FSA).

a. On the SETTINGS page, click Configure for the boston cluster.

Lab Guide - PowerScale Administration

Page 350 © Copyright 2020 Dell Inc.


Monitoring

b. On the Configuration for boston page, select the Enable FSA tab.
Check the Generate FSA reports and View FSA reports in
InsightIQ features in order to view chart information in the Data
Usage and Data Properties views. Click Submit.

c. Next, Select the FSA Configuration tab. Under the Job Settings
fields, review the Result Set Options settings:

• Directory chart maximum depth: This number represents the maximum


depth of the directories that you want InsightIQ to analyze. To specify
unlimited depth, type -1.

• File/directory list size: This number represents the maximum number of


top-contributing files and directories to list in the InsightIQ Data Usage
view.

• Path squash depth: This number represents the maximum number of


directory levels to include in a path.

d. Uncheck the Take snapshot field.

e. Review the Result Set Retention settings:

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 351
Monitoring

• Maximum result set age in days: This number represents, in days, how
long to retain each data set before automatically deleting it. To retain data
sets indefinitely, type 0. You can manually delete a data set at any time.

• Maximum result set count: This number represents the maximum number
of data sets to retain. To retain an unlimited number of data sets, type 0.

f. Verify that the fields are set as shown and click Submit.

g. Click the DASHBOARD tab to review your monitored cluster.

Lab Guide - PowerScale Administration

Page 352 © Copyright 2020 Dell Inc.


Monitoring

Step-by-Step Walk Through: Performance Baseline


1. On the Jumpstation, login as DEES\John (password: Dees12345!), open a
Chrome browser and launch InsightIQ (https://192.168.3.30). Login using
administrator/Dees12345!

2. Get baseline reports on the cluster.

a. Navigate to the PERFORMANCE REPORTING page, Live


Performance Reporting tab.

b. Ensure that Node Performance is selected in the Report Type


dropdown list. Note the other options in the list.

c. Select the date range from the course start date to the current day
(For example, if day 1 of the course was Monday 4/20/2020 then the
Date Range is Mon, Apr 20, 2020, 8:00 am through the current date
and time). Click View Report.

d. Scroll down for the chart view of reports on different metrics such as
External Network Throughput Rate, Protocol Operations Rate,
CPU, Disk Throughput, etc. Any of the report views created here
can be scheduled, generated as a PDF, and emailed. The report can
be customized allowing administrators to choose exactly which charts
to include in the report.

e. You may also change the zoom level, move forward and move
backward in time. Set the Zoom Level to 6hrs and scroll down to a
chart. Note the start time. Mouse-over the chart data to note the fine
granularity of information.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 353
Monitoring

f. Next, let us add filters to the reports. Scroll to the top of the page and
click Create/manage data filters. Note that the rules can be used to
create filters that allow administrators to quickly pinpoint and view
data.

g. Click Add Rule and then click the drop-down arrow that appears.
Select Node from the list. In the Match column, select 1 to view Node
1. Click Apply.

h. Scroll through the reports and notice that the reports only show
information pertaining to Node 1 as per our filter selection in the
previous step. This filter allows you to view or monitor a specific item.
If Node 1 were having performance issues, this live report would
allow you to filter through the metrics and just present the results from
Node 1, thereby making it easier and faster to perform
troubleshooting or performance analytics.

Lab Guide - PowerScale Administration

Page 354 © Copyright 2020 Dell Inc.


Monitoring

i. On the right side or each chart there is an option to download that


particular chart as a CSV file by clicking its link. The charts are all
interactive and allow data detail to be shown by simply hovering over
that part of the chart. Administrators can also click-and-drag to move
the timeline, double-click to zoom in and double-click while holding
the shift key to zoom out.

j. To share a view with other administrators, scroll back to the top of the
page, and in the top right corner of the page, click PERMALINK. The
URL can be sent to an individual. When that person clicks on it, they
can login to the InsightIQ server and see the exact same view.

3. Create a custom performance report.

a. On the PERFORMANCE REPORTING page, click Create a New


Performance Report.

b. To start with blank report, click Create from Blank Report. There are
many standard templates in the lower half of this page that you can
use as starting point for a custom report.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 355
Monitoring

c. Name the report Lab Performance Report Test. Check the Live
Performance Reporting box. This makes the report show up as an
option in Live Performance Reporting.

d. Check the Scheduled Performance Report box. This generates a


report at a specific frequency on a specific cluster. When this is
selected, more scheduling options appear. Use the default Schedule
and Delivery.

Lab Guide - PowerScale Administration

Page 356 © Copyright 2020 Dell Inc.


Monitoring

e. In the Select a Module for this Position field, select Active Clients.
Note the other options in the field. Select the Protocol radio button.
Click Add another performance module, then select Deduplication
Summary (Physical). Once done, click Finish.

f. This generates reports that show active clients broken down by the
protocols they are using. Confirmation of successfully saving the
report is displayed.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 357
Monitoring

g. To view the report, navigate to the Live Performance Reporting tab.


In the Report Type dropdown list, you may select to view the report.

4. Generate cluster capacity reports.

a. Navigate to the FILE SYSTEM REPORTING page. Select the


Capacity Reporting tab.

b. Scroll down to the Capacity Forecast section. Under Plot data, keep
the default option of Total Usage checked.

c. Click View Report. There is a lot of data, but it does help


administrators understand what is currently consumed for storage
and how the estimated value of more capacity is calculated. This is
very useful, as the adaptive nature of OneFS is so different from other
storage systems, it can bring a lot of clarity to administrators.

d. Select different options under the Plot Data section, and note how
the presentation of the chart changes.

Lab Guide - PowerScale Administration

Page 358 © Copyright 2020 Dell Inc.


Monitoring

e. To view Forecast data, hold down the left mouse button and drag it
across the chart for a particular range. This will highlight that area of
the chart. Select the Click to view button to view the forecast data.

5. Create a data usage report showing the largest physical files.

a. On the FILE SYSTEM REPORTING page, select the File System


Analytics tab.

b. In the Report Type drop-down list, select Data Usage. On the FSA
Report menu, select one of the available days. Click View Report.

c. Mouse over the pie chart. Note that any of the slices can be selected
and the detail of the directory is shown on the right. All the columns in
the right section can be selected to change how the data is sorted.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 359
Monitoring

d. To view the largest cluster file, scroll down the page to the Top 1000
Files by table and select Largest Physical Size from the drop-down.

e. Scroll to the top of the page. To explore data properties, from the
Report Type menu, select Data Properties. Then from the FSA
Report menu, select an available day. Click View Report.

f. View the file type that contains the most files. Scroll down to the File
Count by Physical Size chart. Next to Breakout by: select the File
Extension option and note the files by extension are listed.

Lab Guide - PowerScale Administration

Page 360 © Copyright 2020 Dell Inc.


Monitoring

g. With charts like this, you can see files that haven't been used in a
long time and what sizes they are. Continue to explore the graphs
and data views of your cluster as time allows.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 361
Monitoring

Step-by-Step Walk Through: DataIQ


1. On the Jumpstation, login as DEES\John (password: Dees12345!)

2. Create a NFS export for to mount IFS and add the DataIQ server as a root
client. You may either use the WebUI or CLI to perform this step.

a. WebUI option: Open a Chrome browser and launch the WebUI


(https://192.168.3.11:8080). Login to the cluster using
root/Dees12345!

i. Navigate to the UNIX sharing (NFS) page, NFS exports tab.


Set the current access zone to System. Create a new export
as shown in the graphic.

b. CLI option: Open mRemoteNG, and SSH to any node using


root/Dees12345!

Lab Guide - PowerScale Administration

Page 362 © Copyright 2020 Dell Inc.


Monitoring

i. At the boston-1 prompt, run the isi nfs exports create


/ifs --root-clients 192.168.3.60 command.

3. Add the boston cluster to the DataIQ application.

a. Open a new Chrome window or a new tab in an existing Chrome


browser. Launch the DataIQ application (https://192.168.3.60). Login
using administrator/Dees12345!

b. Once logged in, click on Settings and select Data management


configuration. Click Add new volume.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 363
Monitoring

c. Enter the fields as shown to add the PowerScale boston cluster.


Once done, scroll to the bottom and click Create. You will be able to
see PowerScale listed in the Volumes section of the page.

Lab Guide - PowerScale Administration

Page 364 © Copyright 2020 Dell Inc.


Monitoring

4. View monitoring data on the boston cluster.

a. Navigate to the Data Management page, select Browse. You can


view the directory breakdown chart and details of the sub directories
for the boston cluster.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 365
Monitoring

b. To get a breakdown on a specific directory, select the directory and


the details only for that directory are reloaded. In this example, the
marketing directory is selected.

c. You can also specify a size limit on directories to be notified when a


directory has exceeded a size. In this example, the administrator is
notified when the marketing directory 250 MB.

Lab Guide - PowerScale Administration

Page 366 © Copyright 2020 Dell Inc.


Monitoring

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 367
Monitoring

Step-by-Step Walk Through: isi statistics Command


1. On the Jumpstation, login as DEES\John (password: Dees12345!). Open
mRemoteNG from the taskbar. Select Bos-node1, and SSH using
root/Dees12345!

2. Review the isi statistics options.

a. At the boston-1 prompt, run the isi statistics -h |more


command.

b. Identify the options for client, drive, heat, list, protocol, pstat,
query, system, and workload. Run the isi statistics with each
option to view the output and type of data. For example, run the isi
statistics client command.

c. List the valid arguments to the subcommand isi statistics


client by running isi statistics client -h.

3. Use isi statistics to confirm client statistics, history, clients by degraded


active clients and degraded connected clients.

a. Show the average for client throughput by running the isi


statistics client --sort InAvg command.

b. Show by node which clients are connected to which node by running


the isi statistics client --totalby Node command.

Lab Guide - PowerScale Administration

Page 368 © Copyright 2020 Dell Inc.


Monitoring

c. View the overall performance of the cluster and the performance of


each node by running the isi statistics system --nodes
all command.

d. View the performance per drive for the node you are logged into by
your SSH session by running the isi statistics drive --
type sas command.

e. Use the isi statistics drive --type sas --nodes all


command to review the drive information for all nodes.

4. Use the isi commands to manipulate additional information about the cluster.

a. To constantly monitor nodes, run the isi statistics system --


format top --nodes all --interval 2 command. This
refreshes the command every 2 seconds. Press CTRL+C to exit out
of system monitoring.

b. Show the read and writes by class using the isi statistics
heat --classes read,write command.

c. Show performance for the top active results per node by running the
isi_for_array "isi statistics drive | head -5"
command.

Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 369
Monitoring

d. Show the keys options by running the isi statistics list


keys | more command. Press q to exit from the command.

e. Show the node uptimes by running the isi statistics query


current --keys node.uptime --nodes all command.

f. Show the basic consolidated cache stats by running the


isi_cache_stats command.

g. Get the detailed broken down cache reads and prefetches by running
the isi_cache_stats -v command.

Lab Guide - PowerScale Administration

Page 370 © Copyright 2020 Dell Inc.


Lab Guide - PowerScale Administration

© Copyright
Internal Use - Confidential 2020 Dell Inc. Page 371

You might also like