What is the relation between firewall policy and service-policy

Applies to

ONTAP 9.5 and higher

Answer

• In ONTAP, firewall settings contain rules which limit what service ports can be contacted, and from which client IP addresses they may be contacted
  • These are controlled by either firewall-policy, or service-policy
    • Firewall policies are used to control which LIFs can be used for  HTTP, Telnet, NDMP, NDMPS, RSH, DNS, and SNMP access
      • system services firewall policy create
    • Service policies are used to control which LIFs can be used for HTTPS, SSH, iSCSI, NFS, CIFS, FlexCache, and S3 access
      • network interface service-policy create
• Starting with ONTAP 9.5, service policy settings were introduced with the network interface service-policy command tree

• Starting with ONTAP 9.6, you can assign service policies, instead of LIF roles, to LIFs that determine the kind of traffic that is supported for the LIFs
  • Service policies define a collection of network services supported by a LIF

Additional Information

• LIF roles in ONTAP 9.5 and earlier
• LIFs and service policies in ONTAP 9.6 and later