Support access and network settings
Support access and network settings
This page covers two unrelated but customer-facing groups of node commands: giving StorONE support secure remote access when you need help, and the iSCSI-related network settings (CHAP authentication and iSNS discovery) that apply to your nodes' iSCSI targets.
Support tunnel
The support tunnel is a secure remote-access channel that, when enabled, allows StorONE support to connect directly to a node to help diagnose an issue. It's off by default; turn it on when you're working with support and turn it off again once they're done.
Checking support tunnel status
Using the web interface
Open Inventory > Nodes and select Support Tunnel Status.
Using the CLI
nodes support tunnel status
Example
nodes support tunnel status
Enabling the support tunnel
Using the web interface
- Open Inventory > Nodes, select Support Tunnel Enable.
- Under Node Selection, choose the node.
- Confirm.
Using the CLI
nodes support tunnel enable --node=<name>
| Option | Description |
|---|---|
--node=<name> |
The node to enable the support tunnel on. |
Example
nodes support tunnel enable --node s1-node-01
Disabling the support tunnel
Using the web interface
- Open Inventory > Nodes, select Support Tunnel Disable.
- Under Node Selection, choose the node.
- Confirm.
Using the CLI
nodes support tunnel disable --node=<name>
| Option | Description |
|---|---|
--node=<name> |
The node to disable the support tunnel on. |
Example
nodes support tunnel disable --node s1-node-01
Downloading a support package
nodes support package collects system information, resource details, and logs from a node into a single package you can send to StorONE support. Choose a brief package for a lightweight collection, or a full package for a more complete one — you can further tune what a full package includes (memory information, object information, resource information, stacks, thread pool information). Full packages are encrypted automatically; brief packages are not. Logs default to the last 14 days, which you can change with --logDays.
This command is only available from the CLI — there's no web interface page for it.
Using the CLI
nodes support package --node=<name> [--logDays=<numbers>] [--downloadSizeBytes=<numbers>] [--hideProgress] (--brief | --full [--memory --objects --resources --stacks --threads])
| Option | Description |
|---|---|
--node=<name> |
The node to get the support package from. |
--logDays=<numbers> |
Collect logs for the specified number of days back (default is 14 days). |
--downloadSizeBytes=<numbers> |
Download segment size in bytes (default is 1MB). |
--hideProgress--brief
Collect a lightweight support package.
--full
Collect a full support package.
--memory
Collect memory information. Only with --full.
--objects
Collect information on objects. Only with --full.
--resources
Collect information on resources. Only with --full.
--stacks
Collect information on stacks. Only with --full.
--threads
Collect information on threads. Only with --full.
Examples
A quick, lightweight package for a fast issue report:
nodes support package --node s1-node-01 --brief
A full package covering the last 30 days of logs, including memory and resource details:
nodes support package --node s1-node-01 --full --logDays 30 --memory --resources
iSCSI target CHAP authentication
nodes chap configures CHAP (Challenge-Handshake Authentication Protocol) credentials for mutual authentication between iSCSI initiators (hosts) and StorONE's iSCSI target. This is a system-wide setting that applies to the iSCSI target on every node, not to an individual node. Omit both --chapName and --chapSecret to disable target CHAP.
Using the web interface
- Open Inventory > Nodes and select iSCSI Target CHAP Settings.
- Under iSCSI Target CHAP Settings, enter a CHAP Name and CHAP Secret, or leave both blank to disable CHAP.
- Confirm.
Using the CLI
nodes chap [--chapName=<name> --chapSecret=<chapSecret>] [--force]
| Option | Description |
|---|---|
--chapName=<name> |
iSCSI target CHAP username for mutual authentication. If omitted (together with --chapSecret), target CHAP is disabled. |
--chapSecret=<chapSecret> |
iSCSI target CHAP secret for mutual authentication. |
--force |
Skip the confirmation prompt. |
Examples
Set target CHAP credentials:
nodes chap --chapName storone-target --chapSecret "correct-horse-battery-staple"
Disable target CHAP:
nodes chap
iSNS settings
nodes isns configures iSNS (Internet Storage Name Service), an optional discovery service that lets iSCSI initiators automatically discover StorONE's iSCSI targets instead of being configured with a static target address. Omit --address to disable iSNS. Turn on --accessControl to restrict discovery through iSNS to authorized initiators rather than allowing open discovery.
Using the web interface
- Open Inventory > Nodes and select iSNS Settings.
- Under iSNS Settings, enter the Address of your iSNS server, and turn on Access Control if you want to restrict discovery. Leave the address blank to disable iSNS.
- Confirm.
Using the CLI
nodes isns [--address=<text>] [--accessControl] [--force]
| Option | Description |
|---|---|
--address=<text> |
The iSNS server address. If omitted, iSNS is disabled. |
--accessControl |
Enable iSNS access control. |
--force |
Skip the confirmation prompt. |
Examples
Point the system at an iSNS server:
nodes isns --address 10.10.10.20
Point at an iSNS server with access control enabled:
nodes isns --address 10.10.10.20 --accessControl
Disable iSNS:
nodes isns
See also: Nodes overview · High availability