Creating LIF with default firewall policy may cause outage

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 80

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: nfs

Last Updated:

Applies to

ONTAP 9.5
ONTAP 9.6

Issue

When creating a LIF in ONTAP 9.5 or 9.6 where management-http and data-nfs are part of the default-data-files network service policy, ONTAP currently uses the MGMT firewall policy as default.

cluster::> network interface create -vserver vserver -lif vserver_lif -role data -home-node node01 -home-port e0a -address
10.10.10.10 -netmask-length 25 -failover-group data -failover-policy broadcast-domain-wide -auto-revert true

cluster::> network interface show -lif vserver_lif -fields firewall-policy
  (network interface show)
vserver  lif           firewall-policy
-------- ------------- ---------------
vserver  vserver_lif   mgmt