Upgrading a 2 Node MetroCluster to ONTAP 9.7 removes firewall policies
Applies to
- ONTAP 9.7
- Two Node MetroCluster
Issue
- During a MetroCluster upgrade from 9.5 to 9.7, a switchover or switchback fails due to one or more degraded Vservers. In AutoSupport the following errors can be observed in METROCLUSTER-VSERVER.XML
Failed Row : Table Name: vs_firewall_policies_view, Operation: get, Fields: portmap 0.0.0.0/0 -Failed Reason : Apply failed for Object: vs_firewall_policies_view Method: baseline. Reason: "portmap" is an invalid value for the parameter "-service"
Failed Row : Table Name: vs_firewall_policies_view, Operation: get, Fields: https 0.0.0.0/0 -Failed Reason : Apply failed for Object: vs_firewall_policies_view Method: baseline. Reason: "https" is an invalid value for the parameter "-service"
Failed Row : Table Name: vs_firewall_policies_view, Operation: get, Fields: ssh 0.0.0.0/0 -Failed Reason : Apply failed for Object: vs_firewall_policies_view Method: baseline. Reason: "ssh" is an invalid value for the parameter "-service"