01-23-2014 06:07 AM
hi,
for a VCS cluster which is configured with CPS I/O fencing, how can i display the vxfencing keys? i would like to verify that a disk is locked by vxfencing for a particular vcs node.
The Diskgroup resource is online btw, UseFence =SCSI3 and /var/VRTSvcs/log/vxfen/* doesn't particularly complain about anything.
thanks,
ida
Solved! Go to Solution.
01-23-2014 06:20 PM
Hi,
missed to see that you are using CPS .. The concept is little different in CPS
I would recommend to review the Symantec cluster server installation guide (page 126 onwards).
https://sort.symantec.com/documents/doc_details/sfha/6.1/Solaris/ProductGuides/
There are multiple keys/certificates (CA / CSR ) generated during the process. Page 281 talks about how to get they keys manually
G
01-23-2014 07:43 AM
Hi ,
vxfenadm command is used to display they keys ...
refer to man page below
http://sfdoccentral.symantec.com/sf/5.0/solaris/manpages/vcs/vxfenadm_1m.html
-g switch is used to check the registration keys while -r switch is used to check reservation keys
in recent versions, -g /-r switch is replaced with -s I believe. You can check for registration keys on coordinator disks while on data disks you will be able to find the reservation keys
to check registration keys on coordinator disks
#/sbin/vxfenadm -s all -f /etc/vxfentab
similar way you can collate all the disk names (with full path like /dev/rdsk/cxtxdx or /dev/vx/rdmp/<device>) & run the above command to check reservation keys
Registration & reservation keys will be displayed like "AVCS-----" or "A------" where A,B etc corresponds to node, these A,B notations are mapped to /etc/llthosts file ... for e.g node 0 in /etc/llthosts will get A notation while node 1 in /etc/llthosts will get B ...
G
01-23-2014 08:59 AM
Hi Gaurav,
Thank you for your answer, on a cluster using cps,
01-23-2014 06:20 PM
Hi,
missed to see that you are using CPS .. The concept is little different in CPS
I would recommend to review the Symantec cluster server installation guide (page 126 onwards).
https://sort.symantec.com/documents/doc_details/sfha/6.1/Solaris/ProductGuides/
There are multiple keys/certificates (CA / CSR ) generated during the process. Page 281 talks about how to get they keys manually
G
01-24-2014 01:57 AM
As I understand, you want to show registered on data (not coordinator) disk on a paticular VCS node so you can use:
vxfenadm -s diskpath
for a particular disk or
vxfenadm -s all
or put the disks you are interested in into a file and use
vxfenadm -s -f disk_filename
This is the same command Gaurav used in his comment, but as you have found out, you can't use vxfentab file as this would normally contain coordinator disks for disk based fencing, but you are using CPS.
Just to be clear here, there are 2 parts to fencing:
Mike
01-30-2014 07:45 PM
You can use the below command to check the VxFen Keys
vxfenadm -x -k A1 -f /tmp/disklist
/core/etc/clear_scsi3_keys
Thanks///