Clustered Data ONTAP 8.2

Transcription

1 Clustered Data ONTAP 8.2 CIFS/SMB Server Configuration Express Guide NetApp, Inc. 495 East Java Drive Sunnyvale, CA U.S. Telephone: +1 (408) Fax: +1 (408) Support telephone: +1 (888) Web: Feedback: Part number: _A0 ur002 December 2014

2

3 Table of Contents 3 Contents Deciding whether to use this guide... 4 CIFS/SMB server configuration workflow... 5 Gathering network information... 6 Adding the CIFS license... 7 Creating an aggregate... 8 Creating a Vserver that supports CIFS... 9 Creating a volume Creating an SMB share Mapping entries in the DNS server Assigning a data failover group to the data LIF Testing SMB access from a Windows client Where to find additional information Copyright information Trademark information How to send your comments Index... 22

4 4 CIFS/SMB Server Configuration Express Guide Deciding whether to use this guide This guide describes how to quickly set up the SMB/CIFS service on a Vserver, in preparation for configuring SMB client access to files contained on the Vserver. You should use this guide in the following situations: You want a standard configuration following NetApp best practices. You do not want information about all the available options or a lot of conceptual background. The cluster is already created and the cluster time is synchronized with an NTP server. Use this guide if only SMB clients will access the files on the Vserver that you will create. If you also want NFSv3 clients to access the files, see the Data ONTAP Multiprotocol Server Configuration Express Guide. If this guide is not suitable for your situation, you should see the following documentation instead: Clustered Data ONTAP Software Setup Guide (for new systems) Clustered Data ONTAP System Administration Guide for Cluster Administrators (for Vserver creation) Data ONTAP Multiprotocol Server Configuration Express Guide (for access over both NFSv3 and SMB) Clustered Data ONTAP File Access and Protocols Management Guide (for access over NFSv3, NFSv4, and SMB, as well as information about LDAP and Kerberos) OnCommand System Manager Help (available both from within the product and as a PDF download) Documentation is available from the NetApp Support Site. Related information Documentation on the NetApp Support Site: support.netapp.com

5 5 CIFS/SMB server configuration workflow Configuring the CIFS/SMB service involves adding the CIFS license; creating an aggregate, a Vserver for the CIFS service, a volume, and an SMB share; creating DNS entries to map the CIFS server name to the data LIF IP; and assigning a data failover group to the data LIF. You can then test SMB access.

6 6 CIFS/SMB Server Configuration Express Guide Gathering network information You can use a worksheet to collect the information that you require to set up access for clients. You must obtain the IP addresses and other information about your cluster and network from your storage and network administrators before you begin. Names Plan the names that you must define when adding a server configuration. Field Description Your value Vserver name CIFS server name Share name Volume name A name that is either a fully qualified domain name (FQDN) or follows another convention that ensures unique Vserver names across a cluster A name for the CIFS server that allows SMB clients to access files on the Vserver A name for the CIFS/SMB share that SMB clients map A unique descriptive name for the volume DNS information Gather the names of your site's DNS search domains and name servers, which you must enter when you create the Vserver. Field Description Your value Search domains Name servers One through five domain names in the order that they will be searched One through three IP addresses of the domain controllers serving DNS for the Active Directory that the Vserver will join

7 Logical interface (LIF) for data CIFS/SMB server configuration workflow 7 Gather the following information about the network connection for data access, which you must enter when you create the Vserver. Field Description Your value IP address Network mask Gateway Home node Home port The address on the cluster that will be used for data access The network mask and gateway for the LIF The data port that the LIF will be associated with and the node where the data port will be located For information about data ports for each model, see the Hardware Universe at hwu.netapp.com. Active Directory information Gather the following information about your site's Windows Active Directory (AD) domain, which you must enter when you create the Vserver. Field Description Your value Active Directory AD administrative credentials The Windows Active Directory (AD) Domain for the storage system to join A user account with privileges to join the Windows AD domain: the user name and corresponding password Adding the CIFS license You must ensure that the storage system has a CIFS license. A CIFS license is required to enable SMB access to the storage system. Before you begin You must have the CIFS license key. About this task This procedure is performed using System Manager.

8 8 CIFS/SMB Server Configuration Express Guide Steps 1. From the home page, double-click the appropriate storage system. 2. Expand the Cluster hierarchy in the left navigation pane. 3. In the navigation pane, click Configuration > System Tools > Licenses. 4. In the Licenses window, click Add. 5. In the Add Licenses dialog box, enter the software license key and click Add. The Add licenses status window displays the list of licenses that were added successfully. The window also displays the license keys of the licenses that were not added and the reason why the licenses were not added. 6. Click Close. Creating an aggregate You create an aggregate to provide storage to one or more FlexVol volumes. Aggregates are physical storage objects. About this task This procedure is performed using System Manager. Steps 1. From the home page, double-click the appropriate storage system. 2. Expand either the Cluster or the Nodes hierarchy in the left navigation pane. 3. In the navigation pane, click Storage > Aggregates. 4. Click Create. 5. In the Create Aggregate wizard, click Next. 6. Optional: If you want to change the default name, specify a new name, such as aggr2. The default aggregate name ends in a date and time stamp.

9 CIFS/SMB server configuration workflow 9 7. Accept the default value for RAID Type, and click Next. 8. In the Aggregate Details page, click Select disks. 9. In the Change Disk Selection page, select the node on which you want to create the aggregate, specify at least 5 disks in the Number of capacity disks to use field, and click Save and Close. 10. Click Create. 11. Click Finish. Result The aggregate is created with the specified configuration and added to the list of aggregates in the Aggregates window. Creating a Vserver that supports CIFS The Vserver is the basic building block of all configurations. The Vserver contains the volume, CIFS server, DNS configuration, and the logical interface that is used to access data using SMB About this task This procedure is performed using System Manager. Steps 1. From the home page, double-click the appropriate storage system. 2. Expand the Vservers hierarchy in the left navigation pane. 3. In the navigation pane, select the cluster. 4. Click Create.

10 10 CIFS/SMB Server Configuration Express Guide 5. In the Create Vserver wizard window, specify the following Vserver details: a. Specify a Vserver name, such as vs0.example.com. b. For the Data Protocols field, select CIFS. The security style is set to NTFS. c. Optional: Select a different language other than the default C.UTF Specify the DNS configuration: a. Enter one or more domain names in the order that they will be searched. b. Enter the IP addresses of one or more name servers. You should use the Windows Active Directory (AD) Domain Controller as the first domain name server.

11 CIFS/SMB server configuration workflow Click Submit & Continue. The Vserver is created with the specified configuration. 8. In the Data LIF Configuration section, specify the following network details to create a data LIF: IP address, network mask, and gateway that clients will use to access the data Node and data port with which the LIF is associated 9. Specify the following information to create the CIFS server: A new name if you want the CIFS server to have a name different from its containing Vserver

12 12 CIFS/SMB Server Configuration Express Guide The FQDN of an Active Directory (AD) domain that the CIFS server can join Organizational unit (OU) within the Active Directory domain to associate with the CIFS server By default, this parameter is set to CN=Computers. Credentials of an administrative account that has sufficient privileges to add the CIFS server to the OU 10. Click Submit & Close. The CIFS server is created with the specified configuration. 11. Complete the wizard by clicking Skip and then OK. 12. Verify that the new Vserver is configured as required: a. Select the Vserver in the left navigation pane and view its configuration. b. Verify that a network path exists to the data LIF on the Vserver by opening a command prompt and pinging the IP address of the data LIF. Example In a command window, enter ping , and confirm that you receive a reply. Result The Vserver is created with the following: A CIFS server that belongs to the specified Active Directory domain A root volume that has NTFS security style DNS is configured A data LIF for client access to data

13 CIFS/SMB server configuration workflow 13 The following default CIFS shares: admin$, ipc$, and Root A Windows local user (Administrator) and four Windows local groups (BUILTIN \Administrators, BUILTIN\Backup Operators, BUILTIN\Power users, and BUILTIN\users) Three UNIX local users (nobody, pcuser, and root) and four UNIX local groups (daemon, nobody, pcuser, and root) The UNIX user pcuser is the default UNIX user for the CIFS server. The Vserver is started automatically. Creating a volume You must create a FlexVol volume to contain your data. Data must not be stored in the root volume of the Vserver. About this task This procedure is performed using System Manager. Steps 1. From the home page, double-click the appropriate storage system. 2. Expand the Vservers hierarchy in the left navigation pane. 3. In the navigation pane, select the Vserver and click Storage > Volumes. 4. In the Create Volume wizard, click Create. 5. If you want to change the default name, specify a new name, such as vol1. By default, the volume name ends in a date and time stamp. 6. Select the containing aggregate for the volume. 7. Specify the size of the volume.

14 14 CIFS/SMB Server Configuration Express Guide 8. Accept the default value for the Snapshot reserve. The default space reserved for Snapshot copies is five percent for NAS volumes. 9. Click Create. The volume inherits the NTFS style security of the Vserver. 10. Verify that the volume you created is included in the list of volumes in the Volume window. 11. Verify that the volume you created is junctioned under the root volume by going to Storage > Namespace. Creating an SMB share Before SMB clients can access a volume, you must create an SMB share on the volume. About this task This procedure is performed using System Manager. Steps 1. From the home page, double-click the appropriate storage system. 2. Expand the Vservers hierarchy in the left navigation pane. 3. In the navigation pane, select the Vserver and click Storage > Shares. 4. Click Create Share.

15 CIFS/SMB server configuration workflow Click Browse and select the volume that you created earlier. 6. Specify a name for the new share. 7. Provide a description for the share and click Create. Result The share is created with the access permissions set to Full Control for the Everyone group. You can modify the share permissions later if required. Mapping entries in the DNS server Your site's DNS server must have an entry pointing the CIFS server name to the IP address of the data LIF so that Windows users can map a drive to the CIFS server name. Before you begin You must know the IP address of the data LIF and the name of the CIFS server. You must have administrative access to your site's DNS server. If you do not have administrative access, you must ask the DNS administrator to perform this task. About this task This procedure is performed on your site's DNS server. Step 1. Create an A record (Address Record) and a PTR record (pointer record) to map the CIFS server name and the IP address of the data LIF. Assigning a data failover group to the data LIF You must assign a failover group to the LIF for the Vserver so that an appropriate port is automatically associated with the LIF if its existing port has a communication failure. Before you begin You must know the name of the Vserver and its LIF. When you use System Manager to create a Vserver that supports CIFS, the automatically generated LIF name uses the format CIFS_server_cifs_lif1. The cluster must already have a user-defined failover group for data ports, and you must know the name of the failover group.

16 16 CIFS/SMB Server Configuration Express Guide For instructions on how to create such a failover group, see the NAS Express Setup Guide for 32xx Systems or NAS Express Setup Guide for 62xx Systems. To see existing failover groups, you can use the network interface failover-groups show command. About this task This procedure is performed from the Data ONTAP command line. Steps 1. Enable the data LIF to use the data failover group by using the network interface modify command with the -vserver and -lif parameters. Example The following command enables the data failover group for the vs0.example.com_cifs_lif1 LIF of the vs0.example.com Vserver: cluster1::> network interface modify -vserver vs0.example.com -lif vs0.example.com_cifs_lif1 -failover-group data 2. Verify that the failover group is enabled on the LIF by using the network interface show command with the -vserver and -failover parameters. Example The following output displays the ports in the data failover group for the vs0.example.com Vserver: cluster1::> network interface show -vserver vs0.example.com -failover Logical Home Failover Failover Vserver Interface Node:Port Policy Group vs0.example.com vs0.example.com_cifs_lif1 cluster1-01:e1b nextavail data Failover Targets: cluster1-01:e1b, cluster1-01:e2b cluster1-02:e1b, cluster1-02:e2b cluster1-03:e1b, cluster1-03:e2b cluster1-04:e1b, cluster1-04:e2b

17 CIFS/SMB server configuration workflow 17 Testing SMB access from a Windows client You should verify that you have configured SMB correctly by using a Windows client to access the SMB share and write data to the share. Before you begin You must be logged in as a Windows user that is authenticated to the AD domain that includes the Vserver. Steps 1. On a Windows computer, use Windows Explorer to map a drive to the CIFS server name followed by the name of share that you created. Example If the CIFS server is named vs0.example.com and the share is named Test, you should enter \\vs0.example.com\test. 2. On the newly created drive, create a test file. Example Use Notepad to create a text file called test.txt. The file is saved successfully to the SMB share. 3. Delete the test file.

18 18 CIFS/SMB Server Configuration Express Guide Where to find additional information After you have successfully tested SMB access from a client, you are ready to configure file access. There are express guides to help you configure file access, as well as additional reference guides and technical reports. Express guides You should continue to set up file access to by using the following express guide, which is available from the NetApp Support Site. SMB File Access Express Guide Describes how to quickly configure SMB access to files contained in NTFS security-style volumes. Reference guides The following reference documentation, which is available from the NetApp Support Site, can help you further configure client access. OnCommand System Manager Help Describes how to use System Manager to complete typical tasks. Also available as a PDF document. Clustered Data ONTAP File Access and Protocols Management Guide Describes how to configure and manage file access using SMB and NFS protocols. Clustered Data ONTAP Logical Storage Management Guide Describes how to efficiently manage your logical storage resources using volumes, FlexClone volumes, files and LUNs, deduplication, compression, qtrees, and quotas. Clustered Data ONTAP Network Management Guide Describes how to connect your cluster to your Ethernet networks and how to manage logical interfaces (LIFs). Clustered Data ONTAP System Administration Guide for Cluster Administrators Describes general system administration, including how to manage nodes and Vservers. Technical Reports TR-4191 Best Practices Guide for Data ONTAP 8.2 Windows File Services Describes setting up CIFS/SMB, including best practices and troubleshooting information. Related information Documentation on the NetApp Support Site: support.netapp.com

19 19 Copyright information Copyright NetApp, Inc. All rights reserved. Printed in the U.S. No part of this document covered by copyright may be reproduced in any form or by any means graphic, electronic, or mechanical, including photocopying, recording, taping, or storage in an electronic retrieval system without prior written permission of the copyright owner. Software derived from copyrighted NetApp material is subject to the following license and disclaimer: THIS SOFTWARE IS PROVIDED BY NETAPP "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WHICH ARE HEREBY DISCLAIMED. IN NO EVENT SHALL NETAPP BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. NetApp reserves the right to change any products described herein at any time, and without notice. NetApp assumes no responsibility or liability arising from the use of products described herein, except as expressly agreed to in writing by NetApp. The use or purchase of this product does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp. The product described in this manual may be protected by one or more U.S. patents, foreign patents, or pending applications. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS (October 1988) and FAR (June 1987).

20 20 CIFS/SMB Server Configuration Express Guide Trademark information NetApp, the NetApp logo, Network Appliance, the Network Appliance logo, Akorri, ApplianceWatch, ASUP, AutoSupport, BalancePoint, BalancePoint Predictor, Bycast, Campaign Express, ComplianceClock, Cryptainer, CryptoShred, CyberSnap, Data Center Fitness, Data ONTAP, DataFabric, DataFort, Decru, Decru DataFort, DenseStak, Engenio, Engenio logo, E-Stack, ExpressPod, FAServer, FastStak, FilerView, Flash Accel, Flash Cache, Flash Pool, FlashRay, FlexCache, FlexClone, FlexPod, FlexScale, FlexShare, FlexSuite, FlexVol, FPolicy, GetSuccessful, gfiler, Go further, faster, Imagine Virtually Anything, Lifetime Key Management, LockVault, Mars, Manage ONTAP, MetroCluster, MultiStore, NearStore, NetCache, NOW (NetApp on the Web), Onaro, OnCommand, ONTAPI, OpenKey, PerformanceStak, RAID-DP, ReplicatorX, SANscreen, SANshare, SANtricity, SecureAdmin, SecureShare, Select, Service Builder, Shadow Tape, Simplicity, Simulate ONTAP, SnapCopy, Snap Creator, SnapDirector, SnapDrive, SnapFilter, SnapIntegrator, SnapLock, SnapManager, SnapMigrator, SnapMirror, SnapMover, SnapProtect, SnapRestore, Snapshot, SnapSuite, SnapValidator, SnapVault, StorageGRID, StoreVault, the StoreVault logo, SyncMirror, Tech OnTap, The evolution of storage, Topio, VelocityStak, vfiler, VFM, Virtual File Manager, VPolicy, WAFL, Web Filer, and XBB are trademarks or registered trademarks of NetApp, Inc. in the United States, other countries, or both. IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corporation in the United States, other countries, or both. A complete and current list of other IBM trademarks is available on the web at Apple is a registered trademark and QuickTime is a trademark of Apple, Inc. in the United States and/or other countries. Microsoft is a registered trademark and Windows Media is a trademark of Microsoft Corporation in the United States and/or other countries. RealAudio, RealNetworks, RealPlayer, RealSystem, RealText, and RealVideo are registered trademarks and RealMedia, RealProxy, and SureStream are trademarks of RealNetworks, Inc. in the United States and/or other countries. All other brands or products are trademarks or registered trademarks of their respective holders and should be treated as such. NetApp, Inc. is a licensee of the CompactFlash and CF Logo trademarks. NetApp, Inc. NetCache is certified RealSystem compatible.

21 21 How to send your comments You can help us to improve the quality of our documentation by sending us your feedback. Your feedback is important in helping us to provide the most accurate and high-quality information. If you have suggestions for improving this document, send us your comments by to To help us direct your comments to the correct division, include in the subject line the product name, version, and operating system. You can also contact us in the following ways: NetApp, Inc., 495 East Java Drive, Sunnyvale, CA U.S. Telephone: +1 (408) Fax: +1 (408) Support telephone: +1 (888)

22 22 CIFS/SMB Server Configuration Express Guide Index A about this guide deciding whether to use 4 access testing SMB configuration 17 additional information optional tasks 18 aggregates creating 8 audience for the guide 4 C CIFS adding license 7 additional documentation on 18 optional tasks 18 setup overview 5 worksheet to gather setup information 6 CIFS server mapping in the DNS server 15 CIFS shares creating 14 creating aggregates 8 CIFS/SMB shares 14 FlexVol volumes 13 Vservers 9 D data LIFs assigning failover groups 15 DNS creating entries 15 mapping the data LIF 15 documentation additional information about file access 18 file access additional documentation on 18 E express guides F additional documentation 18 CIFS/SMB server configuration workflow 5 requirements for setting up SMB service 4 failover groups assigning to LIFs 15 FlexVol volumes creating 13 L licenses adding for CIFS 7 LIFs assigning failover groups 15 mapping the data LIF on the DNS server 15 M mapping data LIF on the DNS server 15 N next steps optional tasks 18 P ports failing over 15 S setup CIFS, overview of 5 shares creating, CIFS/SMB 14 SMB additional documentation on 18 requirements for using CIFS/SMB Server Configuration Express Guide to set up the SMB service 4

23 Index 23 SMB shares creating 14 verifying access to 17 T technical reports additional documentation 18 testing SMB share access 17 creating 13 Vservers gathering configuration information 6 W worksheet to gather cluster and network information 6 V volumes