IV61808: CLVER DOES NOT DETECT NETMASK MISMATCH BETWEEN AIX AND HA ODM

PowerHA-7.1.1 SP7

APAR status

• Closed as program error.

Error description

• clver does not detect a mismatch between the
  netmask specified in AIX and HA ODM classes,
  e.g:
  
  node 1:
  $ lsattr -El en0 -a netaddr -a netmask
  netaddr 9.155.5.226   Internet Address True
  netmask 255.255.255.0 Subnet Mask      True
  
  node 2:
  $ lsattr -El en0 -a netaddr -a netmask
  netaddr 9.155.5.227   Internet Address True
  netmask 255.255.255.0 Subnet Mask      True
  
  HA config:
  /usr/es/sbin/cluster/utilities/cl_harvestIP_scripts
   -c net_ether_01
  #NetworkName:NetworkAttr:NetworkType:NetAlias:
   NetMask:NetOffset
  net_ether_01:public:ether:yes:
   255.255.255.128:
  
  $ /usr/es/sbin/cluster/utilities/cllsif -c | awk -F ":"
    '{ if ( $3 == "network" || $3 == "net_ether_01")
     print $2,$6,$7,$9,$11 }'
  type node ipaddr interfacename netmask
  boot ha1clJ 9.155.5.226 en0 255.255.255.128
  service ha1clJ 9.155.5.230  255.255.255.128
  service ha1clJ 9.155.5.228  255.255.255.128
  boot ha2clJ 9.155.5.227 en0 255.255.255.128
  service ha2clJ 9.155.5.230  255.255.255.128
  service ha2clJ 9.155.5.228  255.255.255.128
  
  /usr/es/sbin/cluster/diag/clver -tr
  Verification to be performed on the following:
          Cluster Topology
          Cluster Resources
  ...
  Verification has completed normally.
  
  Because the config error is not detected, HA
  activates the service IP with an different
  netmask than used for the boot IP.
  
  node 1 after service IP 9.155.5.228 has been activated:
  
  $ netstat -in | egrep "Name|en0"
  Name  Mtu   Network     Address           ...
  en0   1500  link#2      32.74.4.7d.57.2   ...
  en0   1500  9.155.5     9.155.5.226       ...
  en0   1500  9.155.5.128 9.155.5.228       ...
  
  which may lead to routing problems:
  
  netstat -rn | egrep "Dest|en0"
  Destination        Gateway           Flags   Refs
       Use  If   Exp  Groups
  default            9.155.5.1         UG        1
       26177 en0      -      -
  9.155.5.0          9.155.5.226       UHSb      0
           0 en0      -      -   =>
  9.155.5/24         9.155.5.226       U         1
     7406488 en0      -      -
  9.155.5.128        9.155.5.228       UHSb      0
           0 en0      -      -   =>
  9.155.5.128/25     9.155.5.228       U         0
         149 en0      -      -
  9.155.5.255        9.155.5.226       UHSb      1
          39 en0      -      -
  
  because subnets are overlapping
  (boot subnet: 9.155.5.0/24,
  (service subnet: 9.155.5.128/25).
  

Local fix

Problem summary

• HA verification is not reporting any ERROR, when
  netmask in HA config(which is network netmask)
  does not match with the one in AIX ODM(which is
  boot ip netmask)
  

Problem conclusion

• Reporting error when there is mismatch between
  HA network netmask and aix odm boot ip netmask
  while running HA verification.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IV58991

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  POWERHA SYSMIR

• Fixed component ID

  5765H3900

Applicable component levels

• R711 PSY U867179

     UP14/08/26 I 1000