question

dust0vich-3220 avatar image
0 Votes"
dust0vich-3220 asked AlexBykovskyi answered

Using Mikrotik router SMB server as Cluster File Share Witness in WS2019



I am having an issue trying to use use a Mikrotik CCR router as a file share witness in a WS2019 cluster. I can connect to the share with RW access on a standard Windows 10 machine as well as on one of the member servers in the cluster so I know it is working (with SMB1 disabled). When I use the Set-ClusterQuorum -FileShareWitness \\router\Witness -Credential (Get-Credential) command in powershell, enter the credentials when prompted I get a The Parameter is incorrect error. If I use incorrect credentials it will give the appropriate error so I know it is authenticating correctly. The SMB log in the router does not show any errors, in fact it shows a successful connection.

I am baffled.

Has anybody came across this issue before, or may have some additional troubleshooting steps?

Additional notes: The router does not reside on the same subnet as the cluster members do, but I would assume this would be a non-issue.

Here is the full message

Set-ClusterQuorum : There was an error configuring the file share witness '\\router\Witness'. Unable to save property changes for 'File Share Witness'. The parameter is incorrect At line:1 char:1 + Set-ClusterQuorum -FileShareWitness \\router\Witness -Credential ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : InvalidArgument: (:) [Set-ClusterQuorum], ClusterCmdletException + FullyQualifiedErrorId : InvalidParameter,Microsoft.FailoverClusters.PowerShell.SetClusterQuorumCommand

Thanks in advance.

windows-server-clustering
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, in a wireshark do you see an error ? it would help to know what is blocked.

0 Votes 0 ·

It looks like it is getting an error from the router. This is odd considering that I can actually open the share and view and edit things from it without issue.
https://temp.sh/BXLwo/sniffer.pcap is the full log.


SMB2 Header Protocol: 0xfe534d42 Header Length: 64 Credit Charge: 0 NT Status: STATUS_NOTIFY_ENUM_DIR (0x0000010c) Command: Notify (15) Credits granted: 1 Flags: 0x00000001, Response Chain Offset: 0x00000000 Message ID: 53429 Process Id: 0x00000000 Tree Id: 0x00000002 Session Id: 0x000000000000000d Signature: 00000000000000000000000000000000 [Response to: 169] [Time from request: 0.000202000 seconds]

0 Votes 0 ·
jiayaozhu-MSFT avatar image
0 Votes"
jiayaozhu-MSFT answered

HI,

Thanks for posting on our forum!

Based on your condition, I am strongly recommend you to contact Microsoft Customer Support and Services. Analyzing logs are beyond the scope of Q&A forum and it is also not suggested to put your logs on our forum since our forum are open to the public. In this sense, opeing a case with our senior engineers can not only help protect your personal information, but help you get a more satisfying explanation and solution to this issue. In addition, if the issue has been proved as system flaw, the consulting fee would be refund. You may find phone number for your region accordingly from the link below.
Global Customer Service phone numbers:
https://support.microsoft.com/en-us/help/13948/global-customer-service-phone-numbers

Thanks for your support and understanding! Besides, would you mind helping me Accept Answer? An accepted blog can be put on top of our forum so people who have a similar issue can get to their workaround more quickly. I would really appreciate it if you could support our work in this way.

Have a nice day! : )

BR,
Joan


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AlexBykovskyi avatar image
0 Votes"
AlexBykovskyi answered

Hey,

As mentioned, contact support to get help. In addition, if you have hardware available, you can create a linux VM to create SMB share on top. Just to verify which part of your setup is causing the issue.
As an alternative, you can user StarWind VSAN (either free or paid) to create replicated iSCSI drive, which can be used as a disk witness. Check for more information:
https://www.starwindsoftware.com/resource-library/starwind-virtual-san-for-hyper-v-2-node-hyperconverged-scenario-with-windows-server-2016/

Cheers,

Alex Bykovskyi

StarWind Software

Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.