Redhat cluster fencing configuration with fence_rhevm

Latest response

Hi,

I installed Redhat Cluster with corosync and pacemaker. I am trying to configure fancing device and I am using fence_rhevm device. I need to understand what is the port paramater. It says name of virtual machine but which virtual machine? I searched it google and Redhat web site but I couldnt get clear answer. Can anyone help me about this situation. Thanks.

pcs stonith describe fence_rhevm
Resource options:
ipport: TCP/UDP port to use for connection with device
notls: Disable TLS negotiation, force SSL 3.0
ssl_secure: SSL connection with verifying fence device's certificate
port (required): Physical plug number, name of virtual machine or UUID

Responses

Though this KB looks not updated recently, I see that it is the "node name" being used in cluster setup https://access.redhat.com/solutions/377843

Hi Sadashiva,

The link which you sent says "This procedure written and tested in RHEL 6.5" and my cluster interface is different than the link. According the below line, I assume port isn't required anymore. Is it righ? Thank you for your help. fencedevice agent="fence_rhevm" ipaddr="rhev6-m" login="admin@internal" name="example_fence" passwd="password" power_wait="10" ssl="on"

Hello Cem Yetil,

As per the output of the command that you had originally posted in your query, it shows "port (required): Physical plug number, name of virtual machine or UUID"... So, I think that is mandatory parameter which you can't skip. Since I've not worked on the newer Red Hat Cluster version using PCS command line (RHEL7 based), i can't confirm that. May be someone from community who had worked on cluster setup on RHEL7 using pcs could give a better explanation or answer.

Hi Cem,

This is how you have to configure the fence_rhevm:

pcs -f stonith_cfg stonith create rhev-fence fence_rhevm ipaddr=rhevm.example.com ipport=443 ssl_insecure=1 ssl=1 inet4_only=1 \
login=admin@internal \
passwd=YOUR_SECURE_PASS \
action=reboot \
pcmk_host_map="node01:vm01_fqdn;node02:vm02_fqdn" \
pcmk_host_check=static-list \
pcmk_host_list="vm01_fqdn,vm02_fqdn" \
power_wait=3 op monitor interval=90s
pcs -f stonith_cfg property set stonith-enabled=true
pcs -f stonith_cfg property set stonith-action=reboot
pcs -f stonith_cfg property set stonith-timeout=120s
pcs -f stonith_cfg property set no-quorum-policy=ignore
pcs cluster cib-push stonith_cfg

The important parameters:

pcmk_host_map: mapping nodes to VM. (format: node_name_in_cluster:virtual_server_fqdn)

pcmk_host_check=static-list: checking/managing defined list of hosts

pcmk_host_list: comma separated list of VM_fqdn to check/manage

The no-quorum-policy=ignore depends on your needs. It could be: freeze, stop or ignore as I remember.

I hope it helps.

Franky

Hi Ferenc,

I created fence device as you told but I am always getting "Generic Pacemaker error" when I executed stonith_admin --reboot node2 I had been getting this error when I was created fence device first. I thought it is related with port parameter but now I am getting the same error again :)

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.