Isilon 8.0 Setup, Configuration and Management
Isilon 8.0 Setup, Configuration and Management
0 SETUP,
CONFIGURATION AND
MANAGEMENT
Solution .........................................................................................................................................................99
These exercises cover both Web UI and CLI use for the stated features. This lab can be checked out for multiple days
allowing you to use it for various and specific needs. There is one cluster for your use in performing these labs but can
also be used to explore any of the OneFS features / functions.
The goal is to successfully explore the OneFS universe. All feedback is appreciated.
1 x Windows 2012 R2 Server performing the roles of Active Directory Serve and DNS
1 x Windows 2012 R2 Administrator workstation
4 x EMC Isilon Virtual Storage Appliances
The Virtual Storage Appliances (VSA's) used in this lab are virtualized instances only for the purposes of this lab. In a
real world environment, physical Isilon nodes would be used to provide storage resources.
The following is a list of all lab servers and appliance and their corresponding IP addresses and credentials.
Note
Note: This table is for reference purposes, you may not access everything when completing the use cases in the lab
guide.
Note: On the Launchpad, on C:\Demo_Data are a variety of files types for you to use as you wish to explore and
experience the Isilon OneFS storage system.
Initial Setup
The Isilon nodes have been installed and powered on. It is time to tackle the first task of this proof of concept.
Research has shown that the eighth generation of the OneFS operating system will allow you to efficiently configure
the Enterprise cluster for testing.
Anticipate being able to set up this, simple to manage yet powerful, storage environment without a lot of complex
configuration requirements.
The storage administrator from last night has left a print-screen of the configuration options and a note indicating how
quick and easy it was to setup the initial cluster.
In this exercise, you will investigate both the web administrator interface and the command line interface to learn how
to manage an Isilon Cluster.
Click Log in
in.
If the cluster status indicators are not all green you will address this in a few steps.
Launch mRemoteNG
Click Yes when prompted with the PuTTYNG Security Alert. This will auto log into the SSH session for you using the
root/Password123! credentials.
Type:
isi status
Press Enter
Enter. This will display cluster status information for your three node cluster.
If any Critical Events are displayed or Cluster Health is anything other than OK type the following command:
Press Enter
Enter. This will acknowledge the cluster events.
isi config
Press Enter
Enter. While in the isi config menu, you can alter node and network settings.
help
Press Enter
Enter.
quit
Press Enter to exit the configuration shell and return to the main prompt.
At the cluster prompt, to see a list of the isi commands available, type:
isi
Press Enter
Enter. These commands allow you to perform all the same tasks that can be accomplished from the
Administrative Web Interface and more.
Note
Note: Depending on your size of monitor, you can also just type:
isi | more
Press Enter
Enter. This will show you sections of the help screen within the size of your monitor.
Scale-out storage is the ability to increase performance, capacity, and throughput by the non-disruptive addition of
storage resources. Isilon combines multiple nodes (think of them as individual servers) that do the following:
Today's administrator want ease of storage growth by adding nodes via a serial connection session or the web UI.
Cluster Access
Available Nodes
Click Dashboard
Dashboard, and select Cluster Overview to view the current status of the four node cluster.
Note
Note: The cluster is in a green operational state.
Events
If the cluster displays a yellow or red state next to a node, click Cluster Management
Management, and select Events and Alerts to
review. You can then select the offending events and choose to Mark Resolved.
After events are quieted, click Alerts and review the Alerts and Alert Channels
Channels.
Conclusion
Now you have a four node cluster on which to complete your testing, with minimum time taken to add that node This is
great news for a self-sufficient IT organization.
Now that the Isilon Enterprise cluster is up and running, the next step is to configure and provision storage. Many IT
departments dread this portion of the storage setup as they have spent many late hours working to correctly
accomplish this task.
Isilon fully supports Microsofts Server Message Block (SMB) Protocol for Windows.
You will connect a Windows clients to the cluster and configure SMB shares (drive letters) using the lab infrastructure.
You will also create sub-directories for the data and ensure they can be accessed properly. You will view the data
through the Administrative Web interface while data is being copied onto the cluster.
This PC
The Isilon cluster comes with a default Windows Share called ifs
ifs. Later in this lab, you will view and edit the properties
of the share, but for now you will just connect.
Right-click This PC
PC, and select Map Network Drive
Drive.
Click Finish
admin
Password123!
Click OK
Double-click data
data.
Type:
cd /ifs/data
Press Enter
Enter.
Type:
ls -alhF
Because it was created by admin, admin owns the file with rwx (read, write, execute) Unix permissions
Switch to the web administrator interface. To display the current SMB shares, hover over PROTOCOLS
PROTOCOLS, and select
Windows Sharing (SMB)
(SMB). You will see the default ifs share. You will now create a new share.
Scroll down.
Editing a User
Click Apply
Apply.
Switch to mRemoteNG
mRemoteNG.
Type:
Press Enter.
Create Share
Type:
Press Enter
Enter.
Note
Note: -d is for the directory & true is for confirmation to create
Assign Permissions
Type:
isi smb shares permission modify JaneDoe --wellknown Everyone -d allow -p full
Note
Note: -wellknown is for the account type followed by the account name,, -d is for the permission type (allow/deny),, -p
is for the specific type (full/read/write),
List Permissions
Type:
Press Enter
Enter.
List Shares
Type:
Isilon is one large volume, and one of the concerns that IT groups needs to address is controlling and limiting storage
use for the thousands of potential tenants using the private cloud infrastructure. The EMC Isilon solution allows you to
assign quotas to seamlessly partition the storage into easily managed segments. This can be done at the cluster,
directory, sub-directory, individual user, or group level. SmartQuotas is cluster aware, meaning that it can see the
whole volume even though it spans across all the Isilon nodes. With SmartQuotas you can administer quotas from a
single point, provision storage and change quota policy options on demand.
Simplicity:
SmartQuotas spans across all nodes in an Isilon storage cluster, regardless of the number of storage devices, enabling
you to easily administer storage from a single point of view.SmartQuotas makes it as easy to manage quotas for
thousands of users as it is to manage a few hundred enabling massive scalability of users and groups for even the
largest storage environments.
Efficiency:
Quota management and thin provisioning in a single application. You can configure SmartQuotas so specific users
and groups are only allowed to see the storage they have been provisioned. Unique quota and provisioning policies
can be set at the cluster, directory, sub-directory, user and group level. Robust Notification and Scheduled Reporting
SmartQuotas flexible reporting and notification options provide end-users, managers and administrators the
information they need to manage resource usage.
Quotas can be defined for specific individual users or groups, or create default quotas that control disk usage for
anyone accessing the cluster. Hard, soft and advisory limits can be set across the organization for specific users and
groups, and across various directory structures. Alerts can be configured to give users email notifications when quota
limits are approaching, to enforce hard stops on writes or provide a grace period before enforcing thresholds. When
new users need to be added or directory structures need to be changed, SmartQuotas allows you to change quota
policies on the fly easily meeting the changing storage requirements of the business.
License SmartQuotas
In this exercise, you will configure SmartQuotas for a directory and review the results.
If your session was idle and it closed, or if you receive an authentication error, relaunch your browser.
Activate License
EULA Confirmation
Select I have read and agree to be bound by the terms and conditions of the EULA. I represent that I am authorized to
legally bind the entity licensing this software.
Click Continue
Continue.
Double-click data
Select JaneDoe
JaneDoe, and click Select
Select.
You will receive confirmation that your Quota has been created and you will see the amount listed under the Hard Limit
section.
Click Settings
Settings.
In Generate report every field, change 12 to 1 and select Minutes in the list box.
Click Select
Select.
Generate Report
Click Generated Reports Archive to see reports being generated and listed.
Right-click This PC
PC, and select Map network drive.
Click Finish
Windows Security
In this task you will join the cluster to a Windows 2012 R2 Active Directory (AD) domain.
Click Join
Join.
A confirmation message is displayed and the Active Directory Provider is listed. The Joining Domain task may take up
to a minute.
Press Enter
Enter.
In the output of the command, verify that the ADS status is reported online. Additional information that tells you that
the cluster is correctly joined to the domain includes the display of the domain controller.
IT Departments are facing a tremendous increase in the amount of data to support for their users/customers. Users are
always asking for more storage than what might be available. Many of these users will run various applications such
as video, audio, images, research sets and other forms of data. In addition, IT admins face the daunting task of
managing both an ever-increasing number of clients and new SLA's which might demand failure resiliency. Taken
together, these requirements can seem overwhelming.
SmartConnect, a licensable software module of Isilons OneFS operating system software helps to meet these
challenges by greatly simplifying client management across the enterprise. Through a single host name, SmartConnect
enables client connection load balancing and dynamic NFS failover and failback of client connections across storage
nodes to provide optimal utilization of the cluster resources.
SmartConnect balances client connections across nodes based on policies that ensure optimal use of cluster
resources. By leveraging your existing network infrastructure, SmartConnect provides a layer of intelligence that allows
all client and user resources to point to a single host name, enabling easy management of a large and growing
numbers of clients. Based on user configurable policies, SmartConnect applies intelligent algorithms (e.g. CPU
utilization, aggregate throughput, connection count or round robin) and distributes clients across the cluster to
optimize client performance and end-user experience. SmartConnect can be configured into multiple zones that can
be used to ensure different levels of service for different groups of clients. All of this is transparent to the end-user.
SmartConnect uses a virtual IP failover scheme that is specifically designed for Isilon IQ clustered storage and does
not require any client side drivers. The Isilon cluster shares a pool of virtual IPs and the cluster distributes these IP
addresses across NFS (UNIX) clients. If a node is brought down for any reason, including a failure, the virtual IPs on the
clients will seamlessly failover across all other nodes in the cluster. When the offline node is brought back online,
SmartConnect automatically rebalances the NFS clients across the entire cluster to ensure maximum storage and
performance utilization.
In addition, SmartConnect leverages this virtual IP technology to enable scheduled and automated rebalance of NFS
connections to ensure that optimal performance is being achieved from the cluster. For example, NFS clients can be
automatically and easily rebalanced once per day, based on CPU utilization, to ensure high performance is being
achieved from the cluster (that is, certain clients which have become CPU intense may need to be rebalanced to their
own nodes on the cluster to ensure an optimized client experience). All of this is transparent to the end user.
SmartConnect provides the intelligence and automation necessary to free up time to spend on other more strategic IT
projects. Regardless of whether you have a few clients or thousands of clients or whether you have 3 node or 144
node Isilon IQ storage cluster, SmartConnect makes client management simple, requiring very little to no management
resources.
For NFS environments, SmartConnect provides automated N-way failover/failback and automated rebalance across
the cluster in the event of a failure or for ensuring performance. This delivers industry leading levels of high availability
and optimized performance for Isilons scale-out storage solutions.
With its intelligent client connection load balancing and NFS failover support, SmartConnect achieves breakthrough
levels of performance and availability, enabling IT Managers to meet the ever-increasing demands being placed on
them to ensure always-on, always-available performance from their Isilon clustered storage solutions.
Companies will have used some similar software-based solutions to try to accomplish this type of load balancing, but
it can be complex and might require client side drivers. With SmartConnect, there is no need to install client side
drivers. IT admins will be able to easily manage a growing number of clients and rest assured that in the event of a
system failure, in-flight reads and writes will successfully finish without failing.
Part of this test will walk through two different versions of SmartConnect, the Basic and the Advanced.
The Basic version is included without additional licensing and provides the ability for DNS round-robin to load balance
across all nodes in the cluster. The Advanced version requires an additional license, but introduces additional
features such as rebalancing of clients to nodes based on utilization.
SmartConnect Basic
As SmartConnect is used on the external network, the external subnet will need to be modified.
Click View/Edit to edit the external subnet configuration for subnet0 and add SmartConnect.
Click Edit
Click Edit
Edit.
Click Close
Close.
pool0 Settings
Click Edit
Edit.
The external subnet is comprised of settings for the subnet and the IP address pools. For SmartConnect to work
correctly, a Fully Qualified Domain Name (FQDN) must be used.
Verify you see cluster1.vlab.local and subnet0 in the SmartConnect Basic area.
Click Close
Close.
In the interest of convenience, the required DNS changes have already been made. Each time a DNS query is
performed, the SmartConnect zone hands out a different IP address based on the connection policy.
Type:
nslookup cluster1
Press Enter
Enter.
Now press the up arrow on the keyboard to run the command again and press Enter
Enter.
Notice how the IP address has changed. Each time it will give out a different IP based on the SmartConnect Round
Robin Connection policy.
Type:
ping cluster1
Now press the up arrow on the keyboard to run the command again and press Enter
Enter.
Notice how the IP address has changed. Each time it will give out a different IP based on the SmartConnect Round
Robin Connection policy.
Since you only have SmartConnect Basic, Round Robin is the only Connection Policy option available. In the next
steps, you will review SmartConnect Advanced and the different policies available.
The first step is to license the SmartConnect Advanced functionality. Hover over Cluster Management and select
Licensing
Licensing.
Activate License
Confirm EULA
Select I have read and agree to be bound by the terms and conditions of the EULA. I represent that I am authorized to
legally bind the entity licensing this software
Click Continue.
Expand subnet0
Click Edit
Edit.
In the SmartConnect Advanced area, select Connection count from the Client Connection Balancing Policy list box.
Note
Note: The connection policy and the IP failover policy do not have to be the same. They can be different.
Commit Changes
Click Close
Close.
Command Prompt
Type:
ipconfig /flushdns
Press Enter
Enter.
Type:
nslookup cluster1
Press Enter
Enter.
Notice that the address for cluster1.vlab.local does not behave in a Round Robin configuration due to the changes you
made in the SmartConnect Advanced section.
Isilons SmartLock mode can help meet the stringent requirements of todays medical and financial companies that
require certain types of data be stored in a read-only format for lengthy periods of time. SmartLock allows one to
protect data either in standard mode or compliance. Compliance mode enables data protection in compliance with the
regulations as defined by the US Securities and Exchange 17a-4 rule. Depending on regulations or just a desire to
secure and lock down documents, IT administrators receive requests from users and customers looking for WORM
(write once read many) storage. SmartLock allows you to create directories and commit files within those directories to
the WORM state. You cannot erase or re-write a file committed to a WORM state. Once a file is removed from a WORM
state, you can delete the file. However, you can never modify a file that has been committed to a WORM state, even
after it is removed from a WORM state.
Before you can create SmartLock directories, you must activate a SmartLock license on the cluster. In a SmartLock
Enterprise directory, a file can be committed to a WORM state either manually or automatically by the system. A file
that has been committed to a WORM state in a SmartLock directory can never be modified and cannot be deleted
before the specified retention period has expired. If you have been assigned the ISI_PRIV_IFS_WORM_DELETE privilege
and you own the the file, you can delete the file before the retention period passes through the root user account. The
privileged delete feature is not available in SmartLock compliance mode.
Before you can create SmartLock compliance directories, you must set the SmartLock compliance clock. SmartLock
compliance directories reference the SmartLock compliance clock to facilitate time-dependent operations, including
file retention. You can set the compliance clock only once; after which it can never be modified.
In this exercise, you will explore the SmartLock cluster feature for enterprise clusters. Starting off with installing the
SmartLock license, what changes are there for accounts, limits, cli management, etc.
In this task, you will explore the SmartLock settings on the Enterprise mode cluster.
The first step is to license the SmartLock functionality. Hover over Cluster Management
Management, and select Licensing
Licensing.
Enter License
Confirm License
Select I have read and agree to be bound by the terms and conditions of the EULA. I represent that I am authorized to
legally bind the entity licensing this software
Click Continue.
isi worm -h
Press Enter
Enter. This will list the options when using the worm command.
Type:
Setting the compliance clock will configure the clock to the same time as the cluster system clock. You set the cluster
system clock during cluster creation; you can always adjust the clock if needed before setting cdate from the Web
Administration Interface. After the compliance clock is set, if the compliance clock becomes unsynchronized with the
system clock, the compliance clock will slowly correct itself to match the system clock. The compliance clock corrects
itself at a rate of approximately one week per year.
Since you are not running compliance nodes, the clock cannot be set.
Next you will see how to create a SmartLock directory and configure settings that control how long files are retained in
a WORM state and when files can be automatically committed to a WORM state.
Type:
Press Enter
Enter.
Type:
yes
Press Enter
Enter.
You just made your first SmartLock Directory. Since no other commands were given, this WORM directory supplies the
standard warning. No retention policy has been set.
Type:
Press Enter
Enter.
You have just created a WORM directory with retention mode set.
Type:
Press Enter
Enter.
You have just created a WORM directory with an autocommit time period of thirty minutes and a default retention of six
months, minimum retention period of three months.
Now that you have created WORM directories in three different ways, you will now modify the first folder you created to
add a retention policy.
Press Enter
Enter.
Type:
Press Enter
Enter. Notice the ID # for the sld domain.
Here you will see that of the three WORM directories you created, all three are listed as a enterprise directory, if you
had a compliance cluster, these would say compliance.
Type:
Press Enter
Enter.
You have now set the default, minimum, and maximum file retention to 2 years, 1 year, and 3 years. You can use the
following values for setting time, y for years, m for months, w for weeks, d for days. Autocommit also uses h for hours
and n for minutes in addition to the previously mentioned 4 options. Creating the directory and then modifying it
allows for when you might not have the same person in charge of directory creation and retention policy or you wish to
come back and set the retention period at a later date. While you can set retention policy at a later date, for best
practice it is always recommended that you set this at the time of directory creation.
You will now review the directories you created via the Web Administration Interface.
Click data
data.
Notice that the sld directory is SmartLocked as a domain and the sld1 and sld2 are SmartLocked Directory's. The
folders both have locks on them indicating that there are SmartLock directories present.
Click sld
sld, and then click View/Edit
In the UNIX Permissions area, review and observe the permissions for the sld domain. Click Close when done
reviewing.
Add a Share
View/Edit
Access Permissions
Save Changes
Click Close
Close.
Click Finish
Finish.
Type test
test, and press Enter
Enter.
You have now created a file in a WORM directory but you have not committed it yet.
Type:
Press Enter
Enter.
Notice that it shows the SmartLock State as NOT COMMITTED and Expires not set.
Right-click test
test, and select Properties
Properties.
Select Read-only
Read-only, and click Apply
Apply.
Click OK
OK.
Switch to mRemoteNG
mRemoteNG, press the up arrow on the keyboard and press Enter
Enter.
You have now updated the SmartLock State and when the file Expires.
Confirmation of Choice
You have confirmed the EMC Isilon cluster storage system SmartLock for Enterprise system works. EMC Isilon is an
efficient system, with the ability to support multiple environments, single seat ease of management, dynamically able
to reprovision data as needed for various use cases.
Cloud9+ is the leading cloud service solution company in the NorthWest region. As the storage space continues to
mature Cloud9+ has been leading the market with innovative solutions. The executive board wants to ensure that
Cloud9+ is on the cutting edge of the storage market and has introduced a new service model that will catapult them
ahead of competitors by providing the best service levels at a highly competitive price. In order to be profitable and
make this new strategy work, Cloud9+s CFO has implemented a new accounting model to drive operational costs
down significantly.
Storage can allow a business to win by reducing the amount of human hours needed to manage and grow the storage.
Reducing the complexity of administering file shares, quotas and performance further reduces an IT administration
departments cost. At the same time, some industries require compliance and retention of data via worm directories or
what Isilon calls SmartLock.
Previous companies have encountered challenges with scaling their storage solutions. Challenges erupted when
disparate filer systems containing dual controller heads have to be managed independently. The results were the need
to manage multiple storage systems separately. Those systems were limited by their single file system (namespace)
size (16TB typical). EMC Isilon storage allows the namespace capabilities of a much larger scale and the ability to
quickly adjust to unexpected growth. This virtual vLab using Isilon cluster's allows one to determine if this solution will
meet the objectives of low management and self-sufficient storage with growth as a Proof-Of-Concept (POC).
Nodes work as peers to spread data across the cluster. Segmenting and distributing data a process known as
stripingnot only protects data, but also enables a user connecting to any node to take advantage of the entire
cluster's performance. The use of distributed software to scale data across commodity hardware sets OneFS apart
from other storage systems. No master device controls the cluster; no slaves invoke dependencies. Instead, each
node helps control data requests, boosts performance, and expands the cluster's capacity.
Initial setup of an enterprise cluster. - the wizard is very intuitive and allows for complete configuration of
internal and external networking, support details to allow for alerting, DNS and time settings.
Adding nodes via command line - one-step process of identifying the cluster to join and each node should
take less than 60 seconds to join the cluster in this virtual setup.
Adding nodes via Web Interface - also a single step to join a node to the cluster
Configuration of SMB file shares to a Windows client via CLI and Web Interface.
Joining an AD domain
Creation of SmartQuota quotas - a very easy method to partition storage without creating multiple file systems
and complexity.
Setup of SmartConnect Basic and SmartConnect Advanced.
Load balancing for performance and availability in an automated and seamless fashion.
SmartLock mode, ease of configuration, policy setting and confirmation of status.
With the ease of use in configuring and providing storage, all the tasks are able to be tested in a single afternoon. You
should feel in full control of being able to manage the environment regardless of how many additional nodes are
added to support the scaling. The EMC Isilon solution can support upwards of 20+ Petabyes of data within a single
cluster, so you can rest assured that you can meet your objectives without additional complexity and operational
overhead. Administrators can manage a cluster regardless of the size of scale.
We hope this lab has illustrated the power and ease-of-use of the EMC Isilon solution and how it can tackle some of
your own challenges.
Thank you for your interest in EMC and the EMC Isilon Platform. If you have any questions, you can find additional
information at https://community.emc.com/community/products or join the Isilon Slack community (https://isilon-
users.slack.com) and post your questions.