SRDF with Celerra File Server

September 2000
Copyright © 2000 EMC Corporation. All rights reserved.
Printed September 7, 2000

No part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or
retrieval system, without the prior written consent of EMC Corporation. The information contained in this document is
subject to change without notice. EMC Corporation assumes no responsibility for any errors that may appear. All computer
software programs, including but not limited to microcode, described in this document are furnished under a license, and
may be used or copied only in accordance with the terms of such license. EMC either owns or has the right to license the
computer software programs described in this document. EMC Corporation retains all rights, title and interest in the
computer software programs.

EMC Corporation makes no warranties, express or implied, by operation of law or otherwise, relating to this document, the
products or the computer software programs described herein. EMC CORPORATION DISCLAIMS ALL IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. In no event will EMC Corporation be liable for
(a) incidental, indirect, special or consequential damages or
(b) any damages whatsoever resulting from the loss of use, data or profits, arising out of this document, even if advised
of the possibility of such damages.

EMC, EMC2 (the EMC logo), and Symmetrix are registered trademarks and Celerra, TimeFinder, SRDF, and
where information lives are trademarks of EMC Corporation. All other trademarks used herein are the property of
their respective owners.
CONTENTS

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

Functional Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Active-Passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Active-Active . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
SRDF Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

SRDF With Celerra . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Active-Passive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Active-Active . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

Using Celerra With SRDF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4

Initialization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Restoration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
For More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
 OVERVIEW
SRDF for the Celerra File Server ensures that the file systems on a Celerra File server are continuously
available to network users, even if a Celerra is unavailable or not functioning. This feature provides a sec-
ondary mirror copy of data for the following purposes:

• Disaster Recovery

• Data Center Migration

• Data Center Decision Solutions

SRDF for Celerra is based on proven Symmetrix Remote Data Facility (SRDF) technology. SRDF for the
Celerra File Server adds an additional benefit by ensuring that the Celerra file service is continuously
available, an important consideration for mission-critical applications. SRDF for Celerra ensures continuous
network access to data.

The SRDF feature is transparent to the host operating system and host applications, and SRDF does not
require additional host software for duplicating data on the Symmetrix units at the geographically
separate site(s).

title of white paper goes here 1

 FUNCTIONAL DESCRIPTION
SRDF transfers data between Symmetrix systems
in either uni-directional or bi-directional mode.
In the uni-directional mode, called active-passive
in SRDF terminology, all source volumes reside
one host-attached Symmetrix and all target
volumes reside in another, remotely located
Symmetrix. Data written to the source volumes
as part of normal file system operations is copied
to the target volumes on the remote Symmetrix.
In a bi-directional configuration, called active-active,
both source and target volumes reside in each
Symmetrix. Data written to the source volumes in
either Symmetrix is copied to the corresponding
target volume in the remote Symmetrix.
The following sections provide more information
about each of these modes.
Active-Passive
In an active-passive configuration, as illustrated
in Figure 1, two Symmetrix systems are set up in
physically separate data centers. A disk write
request received on the local Symmetrix is
transmitted over a Symmetrix-to-Symmetrix
communication link and copied on the remote
Symmetrix. Once the remote write operation is
Figure 1. SRDF Active-Passive Mode
Write
DATA
PRIMARY
Symmetrix R1
Figure 2. SRDF Active-Active Mode
PRIMARY
BACKUP
Symmetrix R1
1
Failover configuration, activation, and restoration must all be explicitly initiated by the system administrator.
Once initiated, activation and restoration are automatic.
2 SRDF with Celerra File Server
completed, the remote Symmetrix sends an
acknowledgment to the local. The local Symmetrix
does not accept additional write requests until it
receives the acknowledgment. In this configuration,
the remote Symmetrix is only used as a hot standby.
You can also add additional, active Symmetrix units
to this configuration. The remote Symmetrix serves
as a backup for each active Symmetrix systems.
Active-Active
In an active-active configuration, as shown in
Figure 2, each Symmetrix can be partitioned into
both active and passive areas, and function both
as the primary system and the remote backup.
There are two communications links, each
connecting the active disks on one Symmetrix
with their passive counterparts on the other
Symmetrix. Write requests to each active disk are
copied to the corresponding passive disk. (There
is a one-to-one relationship between active and
passive disks). In this configuration, each
Symmetrix is being utilized as a production
system and as a remote disaster-recovery standby.
In an Active-Active configuration, both Symmetrix
systems are in production, unlike Active-Passive
configurations where the remote Symmetrix is
essentially a hot standby and thus unavailable for
production operations until a failover is initiated.
DATA
Copy
Acknowledge BACKUP
Symmetrix R2
Copy
Acknowledge BACKUP
Copy
Acknowledge PRIMARY
Symmetrix R2
SRDF Connectivity
Celerra with SRDF enables the Symmetrix units
attached to the Celerra File Servers in a campus
environment to be located up to 37 miles (60 km)
apart, using fiber optic links. This implementation
supports both uni-directional and bi-directional
SRDF configurations.
For Celerra with SRDF, the SRDF link must be syn-
chronous. Celerra with SRDF does not support
SRDF semi-synchronous or adaptive copy modes.
SRDF WITH CELERRA
You can combine SRDF and Celerra to ensure
continuity of data access across a Celerra-based
network and/or across long-distances. With the
SRDF link that connects the Symmetrix systems,
Celerra network users have access to data from
the local Symmetrix or, if the local Symmetrix is
unavailable, the remote Symmetrix.
To implement Celerra with SRDF, the Celerra
configuration is modified with respect to the
traditional Celerra. Each logical volume defined in
the Celerra volume database is comprised of two
physical volumes, one on the local Symmetrix and
one on the remote Symmetrix. For example, a
typical Symmetrix volume, volume 001, would be
comprised of 001-R1 (the local disk) and 001-R2
(the remote disk). Any Celerra file systems actually
reside on both disk volumes, with the remote
devices mirroring the data on the local devices.
Celerra with SRDF implements SRDF disaster
recovery capabilities using at least two Celerra
File Server and at least two Symmetrix systems.
Celerra with SRDF requires that each Symmetrix
Figure 3: Celerra Volume Configuration for SRDF
Celerra
Primary
Volume 001
001 - R1 001 - R2
Symmetrix R1 Symmetrix R2
SRDF with Celerra File Server
be set up with the correct SRDF communications
links as required. This section describes the basic
configurations that are supported.
Active-Passive
In this configuration, shown in Figure 4, two
Celerras communicate over LAN or WAN links,
while two attached Symmetrix systems are
connected via SRDF-compatible links. Normal
mirroring between the Symmetrix systems is
carried out, while the Celerra remains on standby,
becoming available if and only if the local Celerra
becomes unavailable. While in standby mode, the
remote is powered up and its Control Station
available on the network. However, the Data
Movers on the standby have no access to the file
systems, including read-only access. As with any
Celerra system, it continually monitors its internal
hardware status and, if properly configured,
initiates a automated callback event to report any
problems that could require attention by either
on-site or EMC personnel.
Figure 4 shows a Celerra Active-Passive configu-
ration similar to the Symmetrix Active-Passive
configuration in Figure 1.
The active-passive configuration provides
complete Celerra redundancy. However, the
remote system cannot be utilized for production
operations because all of its Data Movers are
dedicated to SRDF standby operations.
Figure 4. Celerra with Active-Passive SRDF
LAN/WAN
Links
Celerra R1 Celerra R2
Primary Backup
Copy
Acknowledge
Symmetrix R1 Symmetrix R2
3
 Figure 5: Celerra with Active-Active SRDF
LAN/WAN
Links
Celerra R1 Celerra R2
Failover
Primary Backup
Transfers role/
functionality
Copy
R1 R2
Acknowledge
Copy
R2
Acknowledge
R1
Symmetrix R1 Symmetrix R2
Active-Active
In this configuration, shown in Figure 4, the two
Symmetrix systems are partitioned into active
and passive segments. Each Celerra functions as
both the primary production system and a remote
mirror for the other Celerra. Should either Celerra
(including the attached Symmetrix) become
unavailable, the remote Celerra can take over
ownership of the failed Celerra’s file systems and
network identity, including IP and MAC addresses.
Should either of the Celerra File Servers become
unavailable, the system administrator can initiate
a failover1. After a successful failover, the surviving
Celerra provides connectivity for users and access
to all file systems, both its own primary file systems
through its primary Data Movers and the mirrored
file systems on the RDF standby Data Movers.
Figure 5 shows a typical Celerra active-active
configuration.
With active-active configurations, identifying which
system is “local” depends upon your point of
reference. For any operational Celerra, “local”
refers to the Celerra itself and the production
volumes on the attached Symmetrix, while
“remote” refers to the remotely located Celerra and
the mirrored volumes on its attached Symmetrix.
4 SRDF with Celerra File Server
USING CELERRA WITH SRDF
The Celerra system software enables the Celerra
File Server to recognize the SRDF relationship
between the two Symmetrix systems. In addition,
SRDF communications hardware is installed to
enable the Symmetrix systems to communicate
with each other. This SRDF link must be in
synchronous mode, where every write request
must be acknowledged. This may have a perform-
ance impact during normal mirrored operation.
Each Celerra can communicate with the other
through the Control Stations using LAN or WAN
links, for example, using Telnet to access the
remote administration account. There is, however,
no direct SCSI connection between the local
Celerra and the remote Symmetrix.
Initialization
To initialize an active-active SRDF relationship
between two attached Celerra-Symmetrix pairs,
you execute an initialization command on the
Control Station. This command performs the
following actions:
• Configures the Celerra Control Station to use
SRDF.
• Identifies the backup Celerra that is paired with
the primary Celerra.
• Identifies the volume mapping on the Symmetrix
and matches active (also called R1) volumes with
their passive (R2) counterparts.
• Prompts you to create a remote administration
account on the Control Station that you use to
manage the R2 devices (that is, the devices that
support the production volumes of the other,
remote Celerra) during a failover.
• Prompts you to define certain Celerra Data
Movers as RDF standby units. The standby Data
Movers enable users to access the mirrored file
systems on the backup Celerra if the primary
Celerra becomes unavailable. There is a one-to-
one relationship between primary and SRDF
standby Data Movers. That is, an SRDF standby
Data Mover can serve as a standby for only one
primary Data Mover.
Once this command is executed, the remote Celerra
stands ready to provide full file system access and
functionality in the event of a system failure.
 Activation
To initiate an SRDF failover from the primary
Celerra to the backup, you insure the primary
Celerra is halted, log in to the backup Celerra
using the remote administration account, and
issue the activation command. This command
option is executed at the administrator’s discre-
tion and performs the following actions:
• Sets each R1 volume on the local Celerra (the one
failing over) as read-only, and sets each R2
volume on the remote Celerra (the standby that is
being activated) as read-write.
• Configures each RDF standby Data Mover on the
remote Celerra to acquire the following character-
istics of its counterpart:
Network identity
The IP and MAC addresses of all NICs in the
failed Data Mover
Storage identity
The file systems controlled by the failed Data
Mover
Service identity
The mount and export characteristics of the
file systems (such as CIFS lock and access
control policies) controlled by the failed
Data Mover
Once the failover is activated, users have access
to the same file systems using the same network
addresses as they did on the failed Celerra,
provided they have network access to the remote
Celerra site. Except for the period of interruption
during the failover, users should not notice a
difference in terms of network file access.
Restoration
To restore a Celerra after a failover, you insure the
Symmetrix attached to the failed Celerra is
powered up, log in to the remote Celerra using a
remote administration account, and issue the
restore command. This command option is
executed on the remote Celerra at your discretion
and performs the following actions:
• The data on each R2 volume on the remote
Celerra, which contains any changes to the file
system that occurred during the failover period, is
copied to the corresponding R1 volume on the
failed Celerra.
2
Because each Data Mover failover is an independent event, the failure of one Data Mover to fail over does not affect
the failover of the remaining Data Movers.
SRDF with Celerra File Server
• The R2 devices resume mirroring of the R1 devices.
• Each Data Mover on the failed Celerra is rebooted
and re-acquires the IP address and file system
control from the corresponding standby Data
Mover on the remote Celerra.
• The RDF standby Data Movers are rebooted into
standby mode.
Once this command is executed, users have full
access to the restored file systems on the
restored local Celerra, and the remote Celerra
stands ready to provide failover capability in the
event of another system problem.
Limitations
If any of the Data Movers on the primary have
failed over to another Data Mover under the tradi-
tional internal Data Mover to Data Mover failover
capability, the results of an SRDF failover may be
different than expected. For example, if server_4
fails over to server_9 (as an internal Data Mover
to Data Mover failover), server_9 must have an
SRDF standby configured on the remote Celerra
for any subsequent SRDF failover on this Data
Mover to succeed. In the configuration process,
the system administrator may have configured an
SRDF standby for server_4 but not server_9.
In this simplistic example, the SRDF failover of
server_9 would not occur2.
If, however, server_9 has been configured with a
remote standby, the SRDF failover would occur as
expected. Note that, in such a scenario, an SRDF
standby configured to support server_4 (which
had internally failed over prior to the SRDF
failover) would remain dormant.
When the primary Celerra is restored, server_9
returns to service as the internal standby for serv-
er_4. server_4 remains dormant until restored
trough the normal Data Mover restoration process.
For More Information
For more information about using Celerra with
SRDF, refer to the Celerra File Server Command-
line Interface System Administrator’s Guide, P/N
300-501-550.
5