NetApp Certified Implementation Engineer - SAN and Virtualization

In fact, with the ONTAP DSM 3.2 you can have a mix of iSCSI and FCP paths to the same LUN on a windows box.

https://communities.netapp.com/thread/1289

ALUA (Asymmetric Logical Unit Access) is a set of SCSI commands for discovering and managing multiple paths to LUNs of Fibre Channel and iSCSI SANs. It allows the initiator to query the target about path attributes, such as primary path and secondary path. ALUA no longer requires proprietary SCSI commands.

Disable ALUA on igroups connecting using the NetApp DSM
http://www.cosonok.com/2012/02/netapp-ns0-502-study-notes-part-34-san.html

ONTAP supports the configuration of default and per-initiator authentication parameters; these parameters are used during the iSCSI connection login phase. Initiators may be allowed access only after successfully
performing the CHAP authentication procedure; or may be allowed access without CHAP authentication; or
denied access.

iscsi security add -i <initiator> -s CHAP -p <inpassword> -n <inname> [ -o
<outpassword> -m <outname> ]

Configure the initiator with CHAP as the authentication method. The -p option is used to specify the inbound CHAP password and the -n option to specify the inbound CHAP username. The -o option is used to specify the outbound CHAP password and the -m option is used to specify the outbound CHAP name.
The outbound CHAP password and username are optional and need to be configured if mutual authentication is desired. If the password is not specified on the command line then the administrator is prompted for the password twice.

http://wafl.co.uk/iscsi/#sthash.76dwm6mG.dpuf

FCP or iSCSI license is required for SnapDrive to be used with a NetApp appliance.

http://www.cosonok.com/2012/02/netapp-ns0-502-study-notes-part-24-san.html

VLANs are a standard layer 2 mechanism for segmenting and effectively isolating application traffic. Data on one VLAN cannot be seen or accessed by data traversing another VLAN, they are effectively separate streams.

Common best practices are to isolate IP storage traffic from other protocols, for performance and security.
It is also beneficial to isolate management traffic to a restricted VLAN.

https://devcentral.f5.com/articles/virtualization-how-to-isolate-application-traffic#.UiyA6zAgZBU

Ports to include in a VLAN for administrative security purposes:

Storage Controllers Management Ethernet port.
FC Switches Management port.
Ethernet Switches Management port.
Hosts Management Ethernet port.

http://www.cosonok.com/2012/02/netapp-ns0-502-study-notes-part-24-san.html

The effects of change to single_image cfmode, include:
1. There are more paths to LUNs.
2. Target ports WWPNs change on at least one controller.

http://www.cosonok.com/2012_02_01_archive.html

lun stats -i interval [ -c count ] [ -o ] [ -a | lun_path ]

The -i option will report per LUN performance statistics at the per second interval given.
The default output format for -i is as follows:

Read Write Read Write Average Queue Lun
Ops Ops kB kB Latency Length
#### #### ##### ##### ##.## ###.## lun_path

http://backdrift.org/man/netapp/man1/na_lun.1.html

Portsets are a collection of ports that can be associated with an igroup. Portsets are used to limit the ports that can be used by the initiators in the igroup to access a target lun.

portset create { -f | -i } portset_name [ port ... ]

Creates a new portset.

If the -f option is given, an FCP portset is created

NetApp supports the following Storage Array Type Plug-ins (SATP):

VMW_SATP_ALUA (for FC)
VMW_SATP_DEFAULT_AA (for iSCSI)

http://www.cosonok.com/2012/02/netapp-ns0-502-study-notes-part-34-san.html