Support access and network settings

This page covers two unrelated but customer-facing groups of node commands: giving StorONE support secure remote access when you need help, and the iSCSI-related network settings (CHAP authentication and iSNS discovery) that apply to your nodes' iSCSI targets.

Support tunnel

The support tunnel is a secure remote-access channel that, when enabled, allows StorONE support to connect directly to a node to help diagnose an issue. It's off by default; turn it on when you're working with support and turn it off again once they're done.

Checking support tunnel status

Using the web interface

Open Inventory > Nodes and select Support Tunnel Status.

Using the CLI

nodes support tunnel status

Example

nodes support tunnel status

Enabling the support tunnel

Using the web interface

1. Open Inventory > Nodes, select Support Tunnel Enable.
2. Under Node Selection, choose the node.
3. Confirm.

Using the CLI

nodes support tunnel enable --node=<name>

Option	Description
--node=<name>	The node to enable the support tunnel on.

Example

nodes support tunnel enable --node s1-node-01

Disabling the support tunnel

Using the web interface

1. Open Inventory > Nodes, select Support Tunnel Disable.
2. Under Node Selection, choose the node.
3. Confirm.

Using the CLI

nodes support tunnel disable --node=<name>

Option	Description
--node=<name>	The node to disable the support tunnel on.

Example

nodes support tunnel disable --node s1-node-01

Downloading a support package

nodes support package collects system information, resource details, and logs from a node into a single package you can send to StorONE support. Choose a brief package for a lightweight collection, or a full package for a more complete one — you can further tune what a full package includes (memory information, object information, resource information, stacks, thread pool information). Full packages are encrypted automatically; brief packages are not. Logs default to the last 14 days, which you can change with --logDays.

This command is only available from the CLI — there's no web interface page for it.

Using the CLI

nodes support package --node=<name> [--logDays=<numbers>] [--downloadSizeBytes=<numbers>] (--brief | --full [--memory --objects --resources --stacks --threads])

Option	Description
--node=<name>	The node to get the support package from.
--logDays=<numbers>	Collect logs for the specified number of days back (default is 14 days).
--downloadSizeBytes=<numbers>	Download segment size in bytes (default is 1MB).
--brief	Collect a lightweight support package.
--full	Collect a full support package.
--memory	Collect memory information. Only with --full.
--objects	Collect information on objects. Only with --full.
--resources	Collect information on resources. Only with --full.
--stacks	Collect information on stacks. Only with --full.
--threads	Collect information on threads. Only with --full.

Examples

A quick, lightweight package for a fast issue report:

nodes support package --node s1-node-01 --brief

A full package covering the last 30 days of logs, including memory and resource details:

nodes support package --node s1-node-01 --full --logDays 30 --memory --resources

iSCSI target CHAP authentication

nodes chap configures CHAP (Challenge-Handshake Authentication Protocol) credentials for mutual authentication between iSCSI initiators (hosts) and StorONE's iSCSI target. This is a system-wide setting that applies to the iSCSI target on every node, not to an individual node. Omit both --chapName and --chapSecret to disable target CHAP.

Using the web interface

1. Open Inventory > Nodes and select iSCSI Target CHAP Settings.
2. Under iSCSI Target CHAP Settings, enter a CHAP Name and CHAP Secret, or leave both blank to disable CHAP.
3. Confirm.

Using the CLI

nodes chap [--chapName=<name> --chapSecret=<chapSecret>] [--force]

Option	Description
--chapName=<name>	iSCSI target CHAP username for mutual authentication. If omitted (together with --chapSecret), target CHAP is disabled.
--chapSecret=<chapSecret>	iSCSI target CHAP secret for mutual authentication.
--force	Skip the confirmation prompt.

Examples

Set target CHAP credentials:

nodes chap --chapName storone-target --chapSecret "correct-horse-battery-staple"

Disable target CHAP:

nodes chap

iSNS settings

nodes isns configures iSNS (Internet Storage Name Service), an optional discovery service that lets iSCSI initiators automatically discover StorONE's iSCSI targets instead of being configured with a static target address. Omit --address to disable iSNS. Turn on --accessControl to restrict discovery through iSNS to authorized initiators rather than allowing open discovery.

Using the web interface

1. Open Inventory > Nodes and select iSNS Settings.
2. Under iSNS Settings, enter the Address of your iSNS server, and turn on Access Control if you want to restrict discovery. Leave the address blank to disable iSNS.
3. Confirm.

Using the CLI

nodes isns [--address=<text>] [--accessControl] [--force]

Option	Description
--address=<text>	The iSNS server address. If omitted, iSNS is disabled.
--accessControl	Enable iSNS access control.
--force	Skip the confirmation prompt.

Examples

Point the system at an iSNS server:

nodes isns --address 10.10.10.20

Point at an iSNS server with access control enabled:

nodes isns --address 10.10.10.20 --accessControl

Disable iSNS:

nodes isns

---

See also: Nodes overview · High availability