HP StorageWorks Enterprise File Services WAN Accelerator 3.0.4 installation and configuration guide (AG424-96004, March 2007)

HP STORAGEWORKS EFS WAN ACCELERATOR INSTALLATION AND CONFIGURATION GUIDE 47

2 - INSTALLING AND

ONFIGURING THE HP EFS

NOTE: For detailed information about the performance impact of SMB signing, see the

Microsoft support site. SMB signing was enabled on Windows 2000, Service Pack 3, Critical fix

Q329170.

You can disable SMB signing using one of the following approaches:

 “Enabling the Secure-CIFS Feature,” next

 “Disabling SMB Signing Using Active Directory” on page 48

IMPORTANT: HP recommends you disable SMB signing using the Secure-CIFS feature. If

you are unsuccessful, disable SMB signing using the procedures described in “Disabling SMB

Signing Using Active Directory” on page 48.

Enabling the

Secure-CIFS

Feature

The Secure-CIFS feature enables you to automatically disable SMB signing using a

CLI command or the Management Console.

By default, the Secure-CIFS feature is disabled. When a Windows server is set to

SecuritySignatureEnable, the HP EFS WAN Accelerator stops CIFS optimization

but continues performing HP EFS WAN Accelerator optimization.

If you enable Secure-CIFS using the CLI command secure-sig-opt, the HP EFS WAN

Accelerator performs CIFS optimization for connections even when the

SecuritySignatureEnable setting is specified.

IMPORTANT: The HP EFS WAN Accelerator performs Scalable Data Referencing (SDR)

only if the SecuritySignatureRequired setting is specified on the server.

Before you enable Secure-CIFS, you must consider the following factors:

 If the client-side machine has Required signing, enabling Secure-CIFS prevents

the client from connecting to the server.

 If the server-side machine has Required signing, connection occurs but you

cannot perform full latency optimization with the HP EFS WAN Accelerator.

Domain Controllers default to Required.

You can identify poor CIFS performance by the examining the HP EFS WAN

Accelerator log files in the Management Console. For example, the client-side HP EFS

WAN Accelerator:

Jan 22 00:01:11 dfcfe1 sport[3940]: [smbcfe.WARN] 728 {10.0.0.14:1605

10.0.0.4:445} Cifs parser shutting down due to

error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED. Security signatures are enabled

on the server. Disabling latency optimization, only bandwidth will be

optimized.

For example, the server-side HP EFS WAN Accelerator:

Jan 22 00:04:49 dfcfe1 sport[3940]: [smbcfe.WARN] 733 {10.0.100.86:4688

10.0.0.4:445} Received cifs shutdown request from SFE:

error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED