Win2k3 Enterprise Cluster administrato

whitecrook · 5 Mar 2010 at 01:08

Hi all

Anyone familiar with this.?

I have a 2 node cluster setup hooked up via iSCSI to our SAN, which is acting as a fileserver, serving out 100+ shares among other things.

Now, I don't fully understand this so let me explain

The cluster server has 2 groups - cluster group, and main fileserver group. This contains physical hard disks, network name (FILE-cluster, ip address, and a whole bunch of shares.

I understand that splitting these down can improve performance which moving or falling back, and my tests have shown this to be the case.

I created a 3rd group called FTP-cluster and created new net name, gave a different ip address and added the FTP Iscsi disk, and added in the FTP home directory root, and shared out all subdirectories.

My FTP servers can mount this share and everything is hunky in that respect.

But - the problem is if i visit \\FILE-cluster I can see the shares in the \\FTP-cluster group and vice versa. I can use either IP to directly access either one.

It appears using groups only has any benefit/meaning on the admin/cluster admin side of things (can specify more granular fall back/failover etc) but has NO effect on the 'user' side of things. i.e. I don't want people using resources on FILE-cluster to see anything that's shared out via FTP-cluster. FTP-cluster is to be seen by FTP servers only , not humans

(unless they explicitly veiw it by visiting FTP-cluster.

Can anyone advise?

DustyMiller · 5 Mar 2010 at 06:25

What you have to bear in mid is that the resources are Virtual, and regardless of the resource group that owns them they still reside on the same server. The way to get around this is to use hidden shares, then they wont show.

Also as long as the permissions are set correctly, then only those spcified users can use each shared resoruce.

whitecrook · 5 Mar 2010 at 08:46

That's what I've done I hid the ftp shares.

But why can you add more than one net name and ip address? That doesn't make sense to me? If all it does is duplicate what is already there?

oddjob62 · 5 Mar 2010 at 20:04

whitecrook said:
But why can you add more than one net name and ip address? That doesn't make sense to me? If all it does is duplicate what is already there?

Each group needs a name and ip address because if you move that group to another node, clients need to be able to connect to it.

You have both groups on one node at the moment. If you want to say file-cluster to the other node, you want it to still keep the name file-cluster and the IP Address you've assigned to it so clients can connect.

n3vrmind · 9 Mar 2010 at 10:32

How did you create the shares can i ask?

Did you a) locate the folder, right click and share or b) open computer management, connect to the new network name, expand shares and add it there

whitecrook · 9 Mar 2010 at 21:16

n3vrmind said:
How did you create the shares can i ask?

Did you a) locate the folder, right click and share or b) open computer management, connect to the new network name, expand shares and add it there

In cluster administrator. Create a new share resource. Define names, permissions, dependencies and fallback/failover. Don't do it the other ways as then you don't get the benefits of the cluster...

To the previous poster: Yes, when I move FTP cluster to the other node and access via IP/netname I get only the FTP shares, and the other node has only the file shares. Makes sense now.