{"id":3718,"date":"2023-04-17T19:00:30","date_gmt":"2023-04-17T19:00:30","guid":{"rendered":"https:\/\/geekmungus.co.uk\/?p=3718"},"modified":"2023-04-17T19:00:30","modified_gmt":"2023-04-17T19:00:30","slug":"change-array-to-group-scoped-targeting-hpe-nimble-storage","status":"publish","type":"post","link":"https:\/\/geekmungus.co.uk\/?p=3718","title":{"rendered":"Change Array to Group Scoped Targeting (HPE Nimble Storage)"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The array OS 5.1.x and later supports iSCSI Group Scoped Target (GST) on iSCSI arrays (this is new), previous to this it was using VST Volume Scoped Targeting. GST reduces the number of individual host connections you need to configure and manage, which saves you time and also ensures you don&#8217;t hit limitations in the iSCSI implementation on the host side.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, with Volume Scoped Target (VST), if you need to connect four iSCSI volumes to the host, you would need to connect each target to the host individually. With GST, if you want to connect those same four volumes, you only need to connect to the one target.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On VMware for example, if you had a Nimble Storage array with 4 iSCSI IP addresses, and 10 datastores presented (and using VST) you&#8217;d see 4 targets for the array group, then 10 targets, one for each datastore. In this case they all appear with LUN ID 0 typically.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now when you swap to GST you only see the 4 iSCSI IP addresses, and then each datastore is accessible via these group scoped targets instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is a consequence of AS-117089,\u00a0the Network Affinity Zones are no longer honoured, partly due to all connections now being meshed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NOTE: When you perform a new installation of the array 5.1.x or later, your default target will use GST. If you upgrade to 5.1.x or later, your default target will continue to use VST. This is an important consideration, if you have an older array which was running a version pre-5.1.x then it would have come set with VST, if you&#8217;ve upgraded to 5.1.x or later you&#8217;ll still be using VST, unless of course you use the procedure below to swap it to GST.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#pkd1536255247713.html\">https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#pkd1536255247713.html<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NOTE: For every volume you are changing you must offline its access, its recommended to totally drain the array of data (that&#8217;s how I did it), but if that is not possible, just ensure that there is no I\/O on the volume you are changing or it will cause an outage.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ChangeArraytoGroupScopedTargeting-Goal\">Goal<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The goal of these steps is to:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Swap Existing Datastores from FVST to GST <\/strong>&#8211; Swap all the existing volumes\/datastores from FVST to GST, i.e. from Volume to Group Targetting. (if you are going to replace all the volumes\/datastores you can skip this step).<\/li>\n\n\n\n<li><strong>Set Default Setting<\/strong> &#8211; Set the default setting to GST (Group Scope Targetting) for all new volumes\/datastores that are created after that point.<\/li>\n\n\n\n<li><strong>Complete FVST to GST Swap <\/strong>&#8211; Complete a swap from FVST to GST to allow the array to be put back into service and storage presented once more.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"ChangeArraytoGroupScopedTargeting-Procedure\">Procedure<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">1. Disconnect all hosts (ESXi and Windows) from the volume(s) to be migrated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Connect to the group CLI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. For each volume, verify the number of active connections is 0, with the following command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --info &#91;volumeName] | grep connections<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4. Take each volume to be reconfigured offline with the following command (ensure its not got any IO!)<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --offline &#91;volumeName]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">5. Remove the ACLs from the volume(s) For each volume, issue the command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --info &#91;volumeName] | egrep \"Name|Initiator Group\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">With this you see the list of Initiator Groups allowed access to the the volume, make note of these Initiator Groups listed, for later in the procedure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For each Initiator group listed, issue the following command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --removeacl &#91;volumeName] --initiatorgrp &#91;initiatorGroupName]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">6. Once all ACLs have been removed from each volume, proceed to the next step.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">7. Change the target scope: For each volume, issue:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --edit &#91;volumeName] --iscsi_target_scope group<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Verify the change:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --info &#91;volumeName] | grep Scope<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If it is correct you&#8217;ll see:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Nimble OS $ vol --info datastore001 | grep Scope\r\niSCSI Target Scope: iSCSI Group Target<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Repeat until all your existing volumes are done.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IMPORTANT: It is highly recommended to ensure that each datastore uses a unique LUN ID, much like what you have on a fibre channel storage area network, ensuring that each datastore is presented with a unique LUN ID across your whole iSCSI (and Fibre Channel) estate ensures you don&#8217;t have a clash of LUN IDs, which can cause re-signaturing of VMFS volumes and outages (on VMWare) and other issues on NTFS etc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">8. Now change the default target scope, this ensures that all newly created and presented datastores are created with GST instead of VST.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>group --edit --default_iscsi_target_scope group<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Verify the change with:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Nimble OS $ group --info | grep -i scope\nDefault iSCSI Target Scope: iSCSI Volume Target\nEncryption default settings scope: volume\n\n&lt; Post Change >\n\nNimble OS $ group --info | grep -i scope\nDefault iSCSI Target Scope: iSCSI Group Target\nEncryption default settings scope: volume<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">NOTE: that the &#8220;Encryption default settings scope&#8221; being set to &#8220;volume&#8221; is as expected, this value does not need to be changed, it defines the scope of where the encryption of a volume is, i.e. scoped to the volume itself.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Change iSCSI Default Target Scope<br><a href=\"https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#lgs1579039268104.html\">https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#lgs1579039268104.html<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Change iSCSI Volume Scope from VST to GST<br><a href=\"https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#hme1536256896246.html\">https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#hme1536256896246.html<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Change iSCSI Volume Scope from GST to VST<br><a href=\"https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#zow1536259763236.html\">https:\/\/infosight.hpe.com\/InfoSight\/media\/cms\/active\/public\/pubs_CLI_Administration_Guide_5_1_x.whz\/index.html#zow1536259763236.html<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">9. Re-add the ACL(s) to the volume(s), refer to the previously-noted list of each volume&#8217;s Initiator Group ACLs you got earlier in step 5, remember to set the unique LUN ID!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For each Initiator Group listed, on each volume, issue the command:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --addacl &#91;volumeName] --initiatorgrp &#91;initiatorGroupName]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">NOTE: Ensure you add the VLAN ID argument to the end to ensure you are presenting the volume with the correct ID.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">10. Once all ACLs have been re-added to each volume, you can then bring them all back on line with:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vol --online &#91;volumeName]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">11. Re-establish connections to the volumes by performing a rescan from the host(s), in the case of VMware you&#8217;ll no longer see a target for each volume (plus the 4 for each iSCSI IP), you&#8217;ll now see only 4 targets, because they are now working behind this &#8220;group scope&#8221;.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The array OS 5.1.x and later supports iSCSI Group Scoped Target (GST) on iSCSI arrays (this is new), previous to this it was using VST Volume Scoped Targeting. GST reduces the number of individual host connections you need to configure and manage, which saves you time and also ensures you don&#8217;t hit limitations in the &#8230; <a title=\"Change Array to Group Scoped Targeting (HPE Nimble Storage)\" class=\"read-more\" href=\"https:\/\/geekmungus.co.uk\/?p=3718\" aria-label=\"Read more about Change Array to Group Scoped Targeting (HPE Nimble Storage)\">Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,25],"tags":[],"class_list":["post-3718","post","type-post","status-publish","format-standard","hentry","category-nimble-storage","category-vmware"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/3718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3718"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/3718\/revisions"}],"predecessor-version":[{"id":3719,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/3718\/revisions\/3719"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}