Data ONTAP 7.3 Network Management Guide

• Copyright information
• Trademark information
• About this guide
• Audience
• Accessing Data ONTAP man pages
• Terminology
• FilerView as an alternative to the command-line interface
• Command, keyboard, and typographic conventions
• Special messages
• Network interfaces on your storage system
• Standards and characteristics of frames
  • How Ethernet frame sizes are defined
    • Benefit of increasing Gigabit Ethernet frame sizes
    • Benefit of using jumbo frames
      • Network interface requirements
      • Guidelines for configuring clients for jumbo frames
    • Flow control
      • Flow control options
• How network interfaces are named
• Support for IPv6
• What IPv6 addressing is
  • IPv6 address types
  • IPv6 address scopes
• How to transition from IPv4 to IPv6
• Enabling or disabling IPv6
• What address autoconfiguration is
  • What stateless address autoconfiguration is
  • Enabling or disabling router-advertised messages
• IPv6 address states
• What Neighbor Discovery is
  • ND message types
• How to configure your network interfaces
• Network configuration and management tools
• New maximum number of network interfaces
• Protocol blocking on individual storage system network interfaces
• Viewing and modifying network interface settings using FilerView
• Viewing network interface settings using the storage system command line
• Modifying network interface settings using the storage system command line
• About configuring aliases for an interface
  • Creating and removing aliases
• About changing an interface status up or down
  • Changing the up or down status with ifconfig
• Network interface information you can display
• Ethernet TOE cards
• About displaying TCP offload engine (TOE) information
• What the ifstat command displays
• Displaying TCP/IP driver statistics with the netstat command
• Displaying interface information with FilerView
• How to diagnose network problems
• Diagnosing transport layer problems
• Viewing diagnostic results
• How routing in Data ONTAP works
• Fast path
• The routing table
  • Ways of specifying the default route
  • How to manage the routing table
    • What the routed daemon does
      • When the routed daemon should be turned off
    • Circumstances that might alter the routing table
    • Routing tables in a vFiler unit environment
• How to enable and disable routing mechanisms
• Turning fast path on or off
• Turning routed on or off at the command line
• Turning routed on or off with FilerView
• Displaying the routing table and default route information
• Displaying the routing table using the command line
• Displaying default routing information using the command line
• Displaying the routing table and information using FilerView
• Example of a routing table
  • Routing table flags
• Modifying the routing table
• Protecting your storage system from forged ICMP redirect attacks
• How to diagnose ping problems
• Increasing the ping throttling threshold value
• Checking the ping throttling threshold status
• Disabling ping throttling
• How to maintain host-name information
• How the /etc/hosts file works
  • /etc/hosts file hard limits
• Editing the /etc/hosts file with FilerView
  • /etc/netgroup file hard limits
• Creating /etc/hosts from the NIS master
• DNS name caching
• DNS information you can view
• How to configure DNS to maintain host information
• Configuring DNS at the command line
• Configuring DNS with FilerView
• How DNS resolves host names
• How to use dynamic DNS to update host information
• How dynamic DNS updates work in Data ONTAP
• Support for dynamic DNS updates in Data ONTAP
• Enabling dynamic DNS updates
• Changing the time-to-live setting for DNS entries
• How to use NIS to maintain host information
• How using NIS slaves can improve performance
• How an NIS master is selected
• NIS slave guidelines
• Ways to configure NIS for host lookups
• How to configure NIS with Data ONTAP interfaces
  • Configuring NIS with FilerView
  • Enabling or disabling NIS using the command-line interface
  • Specifying the NIS domain name
  • Specifying NIS servers to bind to your storage system
    • Things to consider when binding NIS servers to storage systems
  • Enabling an NIS slave on your storage system
• NIS information you can view
  • Using the nis info command to display NIS performance statistics
• NIS administrative commands
  • About changing the host-name search order
    • Changing the host-name search order with FilerView
    • Changing the host-name search order by editing the /etc/nsswitch.conf file
• How to monitor your storage system with SNMP
• Types of SNMP traps in Data ONTAP
• About the Data ONTAP MIBs
• What the SNMP agent can do
• How to configure the SNMP agent
  • Enabling SNMP at the command line
  • Configuring SNMPv3 users for read-only access
  • Setting SNMP access privileges
  • Viewing and modifying your SNMP configuration at the command line
    • SNMP security parameters
    • SNMP command syntax
      • SNMP command examples
  • Viewing and modifying your SNMP configuration with FilerView
• User-defined SNMP traps
• How traps work
• Ways to define or modify a trap
  • Viewing and modifying trap values at the command line
  • Viewing or modifying trap values with FilerView
  • Defining traps in a configuration file
  • Example of trap definitions
  • Command syntax for SNMP trap parameters
  • SNMP trap parameters
    • The var parameter
    • The trigger parameter
    • The edge-1 and edge-2 parameters
    • The edge-1-direction and edge-2-direction parameters
    • The interval parameter
    • The interval-offset parameter
    • The rate-interval parameter
    • The backoff-calculator parameter
    • The backoff-step parameter
    • The backoff-multiplier parameter
    • The priority parameter
    • The message parameter
• How VLANs work
• VLAN membership
• How VLAN membership affects communication
• GARP VLAN Registration Protocol
  • GVRP configuration for VLAN interfaces
• VLAN tags
• Advantages of VLANs
• Prerequisites for setting up VLANs
• Guidelines for setting up VLANs in Data ONTAP
• VLAN management on your storage system
• The VLAN command syntax
• Commands for creating and configuring a VLAN
  • Creating a VLAN
  • Configuring a VLAN
• Commands for adding an interface to a VLAN
  • Adding an interface to a VLAN
• Command for deleting a VLAN
  • Deleting all VLANs
  • Deleting a specific VLAN
• Command for modifying VLAN interfaces
  • Modifying VLAN interfaces
• Command for displaying VLAN statistics
  • Displaying VLAN statistics
  • Displaying statistics for a specific VLAN
• How vifs work in Data ONTAP
• Network interfaces grouped into a vif
• Types of vifs
  • Single-mode vif
  • Static multimode vif
  • Dynamic multimode vif
  • Load balancing in multimode vifs
    • IP-address and MAC-address based load balancing
• How to manage vifs
  • The vif command
  • Creating a single-mode vif
  • How an active interface in a single-mode vif is selected
    • Selecting an active interface
  • Why you would want to designate a nonfavored interface
    • Designating a nonfavored interface
  • Creating a static multimode vif
  • Creating a dynamic multimode vif
  • About adding interfaces to a vif
    • Adding interfaces to a vif
  • About deleting interfaces from a vif
    • Deleting interfaces from a vif
  • Displaying vif status
    • What the vif status information table contains
  • Displaying vif statistics
    • The LACP log file
  • Destroying a vif
• Second-level vifs
  • Creating a second-level vif on a single storage system
• Second-level vifs in an active/active configuration
  • Creating a second-level vif in an active/active configuration
• How Internet Protocol Security (IPsec) works
• How security associations work
• What security policies include
• Key exchanges
• Data ONTAP IPsec implementation
• IPsec in an active/active configuration
• IPsec in a vFiler unit configuration
• IPsec setup
• Configuring certificate authentication
  • Requesting a signed certificate from a Windows 2000 certificate authority
  • Installing a certificate signed by a Windows 2000 certificate authority onto a Windows client
  • Requesting a signed certificate from a non-Windows 2000 certificate authority
  • Installing a certificate signed by a non-Windows 2000 certificate authority onto a Windows client
  • Installing a signed certificate onto a storage system
  • Installing root certificates onto a storage system
  • Specifying the subset of root certificates that Data ONTAP uses for certificate authentication
  • Viewing the subset of root certificates Data ONTAP uses for certificate authentication
  • Installing root certificates onto a Windows client
  • Enabling the IPsec certificate authentication mechanism on a storage system
  • Enabling the IPsec certificate authentication mechanism on a Windows client
• Kerberos support
• Configuring preshared keys
• Enabling or disabling IPsec
• Security policies and IPsec
• Creating a security policy
  • Security policy options
• Displaying existing security policies
• Deleting a security policy
• How to display IPsec statistics
• Displaying IP statistics
• How to display security associations
• Viewing security associations
• Network interface statistics
• Statistics for Gigabit Ethernet contoller II - VII and G20 interfaces
• Statistics for TOE Gigabit and TOE 10 Gigabit Ethernet interface
• Statistics for FAS250FAS270 network interfaces
• Statistics for BGE 10/100/1000 Ethernet interface
• Ways to improve storage system performance
• IP port usage on a storage system
• Host identification
• etc/services NNTP and TTCP ports
• Ports in a block starting around 600
• Ports not listed in /etc/services
• FTP
• SSH
• Telnet
• SMTP
• Time service
• DNS
• DHCP
• TFTP
• HTTP
• Kerberos
• NFS
• CIFS
• SSL
• SNMP
• RSH
• Syslog
• Routed
• NDMP
• SnapMirror and SnapVault
• netdiag error codes