Setting the fence level – HP XP7 Storage User Manual
Page 166
Table 37 Relationship between Continuous Access Synchronous pair statuses and fence levels (continued)
Fence level and write response
Continuous Access Synchronous pair status of
volume
Async [4]
Never [3]
Status [2]
Data [1]
[1] When the fence level is data: Mirroring consistency is assured, since a write error is returned if mirror consistency with the
remote S-VOL is lost. The secondary volume can continue operation, regardless of the status. Note: A P-VOL write that discovers
a link down situation will, in addition to returning an error to the host, likely be recorded on [only] the P-VOL side.
[2] When the fence level is status: If there is a mirror consistency problem (that is, PSUE) and it is possible to set the S-VOL to
PSUE, the P-VOL write completes OK. If the S-VOL cannot be set to PSUE for any reason, the P-VOL write completes with an error.
The mirror consistency of the S-VOL depends on its status:
PSUE: The secondary volume is dubious.
PAIR: The secondary volume can continue operation.
[3] When the fence level is never: Writing to the P-VOL is still enabled in the state where mirror consistency to the S-VOL is lost,
regardless of whether the secondary volume status is updated or not. Thus, the secondary could have these states:
PSUE: The secondary volume is dubious.
PAIR: The secondary volume is substantially dubious, since it can continue operation and is also dubious. The P-VOL status must
be checked to confirm the mirroring consistency.
[4] When the fence level is async: Continuous Access Asynchronous/Cnt Ac-J uses asynchronous transfers to ensure the sequence
of write data between the P-VOL and S-VOL. Writing to the P-VOL is enabled, regardless of whether the S-VOL status is updated
or not. Thus the mirror consistency of the secondary volume is dubious (similar to the "Never" fence):
•
PSUE: The S-VOL mirroring consistency is not assured, but the PSUE suspended state ensures the sequence of data for the
consistency group; thus, data consistency is also assured during a PSUE state. At a PSUE state, the P-VOL writes still complete
and are also noted in a bitmap for future transfer. Due to the use of a bitmap in the suspend state, data consistency is not
assured during a copy state resync.
•
PAIR: If the P-VOL and S-VOL are both in a PAIR state, mirror consistency is not assured (may be behind) but data consistency
is assured (what has reached the S-VOL is in the proper order).
Setting the fence level
Data fence level
shows the relationship between redo log files (journal) and data files. If the
S-VOL takes over from the P-VOL in the status shown in
(where two errors
have occurred), the secondary host leaves data (V) unprocessed in the roll-back processing and
cannot be recovered completely. Therefore, the fence level of a redo log file must be defined as
data. Once the fence level is set to data, the P-VOL returns an error if data may possibly be
inconsistent when a write request is issued by the host. Since writing to the data file is not executed
due to a write error of the redo log file, the log file stays consistent with the data file. However,
when the fence level is set to data, a write I/O error occurs even in the case where operation is
suspended due to an error in the S-VOL. Accordingly, duplication becomes meaningless when the
S-VOL takes over. Thus, applications using paired volumes with the data fence level should be able
to handle write I/O errors properly. For example, the Oracle application creates multiple redo log
files by itself (three by default). The fence level can be set to data in this case in which disk errors
are permissible by creating multiple files.
Figure 55 Relationship between logs (journal) and data in paired status
Never fence level
166 Data replication operations with RAID Manager