FUJITSU Storage ETERNUS DX, ETERNUS AF Configuration Guide -Server Connection- (iscsi) ETERNUS DX S4/S3 series Hybrid Storage Systems, ETERNUS AF series, ETERNUS DX200F All-Flash Arrays Settings
This page is intentionally left blank.
Preface This manual briefly explains the operations that need to be performed by the user in order to connect an ETERNUS DX/AF to a server running Solaris OS, Windows, Linux, VMware ESX, Citrix XenServer, or Oracle VM Server for x86 via an iscsi interface. This manual should be used in conjunction with any other applicable user manuals, such as those for the ETERNUS DX/AF, server, OS, iscsi HBAs, LAN cards, and drivers. Refer to "Configuration Guide -Server Connection- Notations" for the notations used in this manual such as product trademarks and product names. For storage systems that are supported by the OS, refer to the Server Support Matrix of the ETERNUS DX/AF. 17th Edition December 2017 The Contents and Structure of this Manual This manual is composed of the following two chapters. "Chapter 1 Workflow" (page 6) This chapter describes the workflow when setting up a storage system. "Chapter 2 Setting Up the ETERNUS DX/AF" (page 8) This chapter describes how to set up a storage system. 3
Table of Contents Chapter 1 Workflow 6 Chapter 2 Setting Up the ETERNUS DX/AF 8 2.1 Common Settings... 8 2.1.1 Setting the To-server Connection Type (Setting the iscsi Port Parameters)...8 2.1.2 Creating the Server Accessible LUN Groups (Setting the LUN Groups)...10 2.1.3 Setting the Host Responses...10 2.1.4 Setting the CA Port Groups...11 2.1.5 Setting the Server iscsi Host...11 2.1.6 Allocating LUN Groups (Setting the Host Affinity)...11 2.1.7 Setting CHAP Authentication...12 2.2 Specific Settings... 13 2.2.1 Setting the CA Reset Groups...13 2.2.2 Setting the Subsystem Parameters...13 4
List of Tables Table 2.1 iscsi port parameter settings...8 Table 2.2 Transfer rate...9 Table 2.3 Host response settings...10 5
Chapter 1 Workflow This manual is used when performing the setup procedures described in the "Setting Up the ETERNUS DX/AF" section of the "Configuration Guide -Server Connection- (iscsi)" for each OS. Required Documents "ETERNUS Web GUI User's Guide" Workflow Setting the iscsi Port Parameters Set the to-server connection type. "2.1.1 Setting the To-server Connection Type (Setting the iscsi Port Parameters)" (page 8) Setting the LUN Groups Set the server accessible LUN groups. "2.1.2 Creating the Server Accessible LUN Groups (Setting the LUN Groups)" (page 10) Setting the Host Responses Set the host responses to match the connection configuration. "2.1.3 Setting the Host Responses" (page 10) 6
Chapter 1 Workflow Setting the CA Port Groups Create a group of ports for each CA type. "2.1.4 Setting the CA Port Groups" (page 11) Setting Server iscsi Set IP addresses, aliases, and iscsi names for servers. "2.1.5 Setting the Server iscsi Host" (page 11) Setting the Host Affinity Define the relationship between the iscsi card HBA, the CA port group, and the LUN group. "2.1.6 Allocating LUN Groups (Setting the Host Affinity)" (page 11) When setting CHAP authentication When not setting CHAP authentication Setting CHAP Authentication Set CHAP authentication to enhance security for an iscsi connection. "2.1.7 Setting CHAP Authentication" (page 12) Setting the Specific Parameters Set the required parameters according to the OS and the connection configuration. "2.2 Specific Settings" (page 13) After completing all the required procedures in this manual, follow the procedures in "Configuration Guide -Server Connection- (iscsi)" for each OS. 7
Chapter 2 Setting Up the ETERNUS DX/AF 2.1 Common Settings This section explains the settings required for all server OSs, regardless of the connection configuration. See the "ETERNUS Web GUI User's Guide" for details of how to set up and operate ETERNUS Web GUI. 2.1.1 Setting the To-server Connection Type (Setting the iscsi Port Parameters) For each connection configuration that is listed below, perform the corresponding iscsi port settings. Retain the default values for all of the parameters that are not described below. Table 2.1 iscsi port parameter settings Parameter Solaris OS, HP-UX, Windows, Linux, VMware ESX, Citrix XenServer, Oracle VM Server for x86 Basic Information iscsi Settings iscsi Name Arbitrary Caution: When configuring multipaths, specify a different name for each iscsi port. If the same iscsi name is specified for multiple ports, connection via multipaths may not be available. Alphabetic characters, numeric characters, "." (period), ":" (colon), and "-" (hyphen) can be used. Up to 223 characters can be input. Alias Name Arbitrary TCP/IP Settings IP Address Subnet Mask Gateway TCP Port No. TCP Window Scale isns Server VLAN_ID Arbitrary (Specify IP addresses in different subnetworks for the iscsi ports that configure a multipath.) For details on IPv6 for IP addresses, refer to the manuals of the iscsi products for the relevant OS or contact the support desk of the product vendor. Arbitrary Arbitrary 3260 (default value) 2 (default value) Select "Enable" to use the isns server, and specify the IP address for the isns server. Arbitrary (When the tag VLAN is used, set this parameter according to the tag VLAN settings of the LAN switch and the server LAN card.) 8
Chapter 2 Setting Up the ETERNUS DX/AF 2.1 Common Settings Parameter Solaris OS, HP-UX, Windows, Linux, VMware ESX, Citrix XenServer, Oracle VM Server for x86 TCP/IP Settings Jumbo Frame Security Settings CHAP CHAP User Name New Password Confirm new Password Header Digest Data Digest General Settings Disable (default value): When disabling the Jumbo Frame Enable: When enabling the Jumbo Frame ON: When either unidirectional CHAP authentication or bidirectional CHAP authentication is used OFF (default value): When unidirectional CHAP authentication or bidirectional CHAP authentication is not used Specify a password when using bidirectional CHAP authentication. When unidirectional CHAP authentication is used, a user name and password are not required. OFF (default value) OFF (default value) Transfer Rate See the table below (*1) Reset Scope Release Reservation if Chip is Reset CmdSN Count Additional IP Address Information Additional address information Multiple VLAN I_T_L (default value) Disable (default value) Unlimited Arbitrary *1: When the CA type of the target port is 10G BASE-T iscsi, this parameter is displayed. To set the appropriate value, refer to Table 2.2. Table 2.2 Transfer rate Switch connection Maximum transfer rate of LAN switches Direct connection Maximum transfer rate of LAN cards 10 Gbit/s 1Gbit/s 10 Gbit/s 1Gbit/s 10 Gbit/s 1Gbit/s 10 Gbit/s 1Gbit/s If the Storage Cluster function is used, all the port parameters must be the same between the ports that are to be set as pairs. However, if the Primary storage and the Secondary storage are operated on different subnets with an iscsi configuration, the iscsi IP address can be different between the Primary storage and the Secondary storage. The connectable OSs are limited if different iscsi IP addresses are set. For details, refer to the "Server Support Matrix". 9
Chapter 2 Setting Up the ETERNUS DX/AF 2.1 Common Settings 2.1.2 Creating the Server Accessible LUN Groups (Setting the LUN Groups) Create LUN groups for the server to access. Refer to "Connectivity Management" in "ETERNUS Web GUI User's Guide" for details, and set the LUN groups. Depending on the OS version, the server may not recognize the ETERNUS DX/AF unless a LUN group is assigned from LUN0. In this case, assign a LUN group starting from LUN0 in ascending order. 2.1.3 Setting the Host Responses The host response parameters for the ETERNUS DX/AF must be set to match the way the server processes the responses to requests from the ETERNUS DX/AF. Setting of the host response must be done before connecting the ETERNUS DX/AF to the server. Set the parameters that are described below for each OS. Retain the default values for all of the parameters that are not described below. Table 2.3 Host response settings OS Conditions Host response selection Parameter Setting value Solaris Windows VMware ESX When using PRIMECLUSTER (regardless of the multipath software type) When using the OS standard Multipath Driver (MPxIO) Default Solaris MPxIO Other cases Default Default Linux For RHEL7 None (Create a new host response) For RHEL6 with a 10Gbit/s isc- SI connection None (Create a new host response) iscsi Discovery Reply Mode Sense Settings Sense Data Conversion Other cases Default HP-UX HP-UX Citrix XenServer None (Create a new host response) Oracle VM Server for x86 When using OS version 3.2.x or later None (Create a new host response) iscsi Discovery Reply Mode iscsi Discovery Reply Mode Other cases Default Port - Reply Target Port Only 0B * * g 06 * * Port - Reply Target Port Only Port - Reply Target Port Only 10
Chapter 2 Setting Up the ETERNUS DX/AF 2.1 Common Settings If all the following conditions are met, instead of selecting the host response, configure new settings according to the table below. All other parameters should be left on their default values. The firmware version is V10L61 or earlier VMware ESXi 6.0 Update 2 or later, or VMware ESXi 6.5 or later is used VMware vsphere Virtual Volumes (VVOL) is used Parameter Setting value Sense Data Conversion 5/25/00 g 5/20/00 2.1.4 Setting the CA Port Groups Create new iscsi port groups and register the ports as members of the groups. A port group is a group of ports that access the same LUN group (ports that are used for multipath connection to the server or for connecting to the cluster configuring server). Configure the host affinity setting for each iscsi port group. 2.1.5 Setting the Server iscsi Host Register the IP addresses and iscsi names of each server that will access the ETERNUS DX/AF. At the same time, set the Host Response No. registered in "2.1.3 Setting the Host Responses" (page 10). Registering the IP addresses and setting up Host Affinity Groups in "2.1.6 Allocating LUN Groups (Setting the Host Affinity)" (page 11) allows limits to be set on which servers are allowed to access which ETERNUS DX/AF LUNs. Refer to "Add iscsi Host" in "ETERNUS Web GUI User's Guide" for details, and set the LUN groups. For the iscsi name of the server, refer to the relevant "ETERNUS DX/AF storage systems Configuration Guide - Server Connection- (iscsi)" according to the OS that is used. 2.1.6 Allocating LUN Groups (Setting the Host Affinity) Allocate the relationship between servers that are to be connected to the iscsi ports of the ETERNUS DX/AF, CA port groups, and LUN groups using the Host Affinity setting function to specify which LUNs to be accessed. This sets access restrictions to the ETERNUS DX/AF from each server. Refer to "Connectivity Management" in "ETERNUS Web GUI User's Guide" for details, and set the LUN groups. When setting LUNs that are to be recognized for multiple iscsi paths, create a LUN Group, and set this same LUN Group to all of the iscsi paths. If the one-to-one relationship between IP addresses and LAN cards cannot be determined, the Host Affinity may not be set correctly. In this case, trying various settings may be necessary until the server is able to recognize the ETERNUS DX/AF logical disks. Only Solaris OS servers can be shared with iscsi ports when the iscsi ports (of the ETERNUS DX/AF where iscsi Boot is performed) are shared with multiple servers. 11
Chapter 2 Setting Up the ETERNUS DX/AF 2.1 Common Settings 2.1.7 Setting CHAP Authentication The ETERNUS DX/AF supports the use of CHAP authentication. This section describes the procedure for setting CHAP authentication in the ETERNUS DX/AF. Note that the CHAP authentication setting can be omitted. To set CHAP authentication, enable the CHAP settings in advance according to "2.1.1 Setting the To-server Connection Type (Setting the iscsi Port Parameters)" (page 8). To set bidirectional CHAP authentication, specify a CHAP user name and password for the iscsi port in advance. 1 Click [iscsi] under [Port Group] from [Connectivity] in [Category]. 2 Select the [Port] checkbox that is to be set for CHAP authentication from [iscsi Port Group] and click [Configure iscsi Port] in [Action]. 3 Enable CHAP authentication ("ON" is displayed), and enter the CHAP User Name and Password that is used to access the target host. Specify the CHAP User Name and Password of the server to be connected within the following range. CHAP User Name Between 1 255 alphanumeric characters can be entered. Password When a LAN card is used as the host adapter, between 12 16 alphanumeric characters can be entered. When an iscsi HBA is used as the server adapter, between 12 100 alphanumeric characters can be entered. 12
Chapter 2 Setting Up the ETERNUS DX/AF 2.2 Specific Settings 2.2 Specific Settings The required settings vary according to the OS and the connection configuration. Check the various cases described below, and perform any required settings. 2.2.1 Setting the CA Reset Groups Because all of the ports are configured to be members of one CA reset group in the initial setting, the reset group settings do not need to be changed. 2.2.2 Setting the Subsystem Parameters 2.2.2.1 Load Balance (for HP-UX Only) For HP-UX connection, select "Disable" for "Load Balance" in the "Setup Subsystem Parameters" function. This prevents sense responses that require access retries from being issued when the ETERNUS DX/AF is overloaded. For HP-UX server, improper logs may be recorded unless sense response is restricted. Therefore, "Load Balance" should be disabled. (Sense response should be restricted.) Note that changing the "Load Balance" setting has no affect on non-hp-ux servers. 13
(iscsi) ETERNUS DX S4/S3 series Hybrid Storage Systems, ETERNUS AF series, ETERNUS DX200F All- Flash Arrays Settings Date of issuance: December 2017 Issuance responsibility: FUJITSU LIMITED The content of this manual is subject to change without notice. This manual was prepared with the utmost attention to detail. However, Fujitsu shall assume no responsibility for any operational problems as the result of errors, omissions, or the use of information in this manual. Fujitsu assumes no liability for damages to third party copyrights or other rights arising from the use of any information in this manual. The content of this manual may not be reproduced or distributed in part or in its entirety without prior permission from Fujitsu.