ONTAP SVM settings for Trident | NetApp | Page 1

ocean apex Feb 17, 2023, 1:04 PM

#

What "data-services" should a ONTAP SVM have for serving Trident?
And what "service-policy" should a LIF of an ONTAP SVM serving Trident have when both management and NFS are provided through the same LIF?

rugged wyvern Feb 17, 2023, 1:17 PM

#

I think this will answer your questions, but if it doesn't feel free to ask a follow-up question. https://kb.netapp.com/Advice_and_Troubleshooting/Data_Protection_and_Security/SnapCenter/How_to_setup_ONTAP_to_be_accessed_by_APIs

NetApp Knowledge Base

How to setup ONTAP to be accessed by APIs

ocean apex Feb 17, 2023, 1:31 PM

#

Thank you but it doesn't seem to mention the SVM part and anything related to Trident.
But I guess "mgmt-nfs" for the LIF is correct?

feral gyro Feb 17, 2023, 1:41 PM

#

Correct, mgmt-nfs to use same LIF for mgmt and data.

ocean apex Feb 17, 2023, 1:49 PM

#

Any thoughts on the data services enabled for the SVM?
I am guessing something like "-data-services data-nfs,management-https" but it would be nice with some documentation about it which I can't find.
Although that doesn't match "mgmt-nfs" on the LIF so it will create a custom service-policy instead.

rugged wyvern Feb 17, 2023, 2:31 PM

#

[-data-services <LIF Service Name>,…] - Data Services
This optionally specifies the data services for new network interfaces created on the Vserver. If no value is specified, the default services list will be applied. This information will be used to construct the default service policies for this Vserver, which can be viewed using the network interface service-policy show command.

ocean apex Feb 17, 2023, 2:37 PM

#

Thank you, but anything for use with Trident?

feral gyro Feb 17, 2023, 2:37 PM

#

In my lab i see:

Vserver Name: nfs_svm
Logical Interface Name: nfs_svm_mgmt1
Service Policy: default-management
Service List: data-core, management-ssh,
management-https, data-fpolicy-client, data-nfs
(DEPRECATED)-Role: data
Data Protocol: nfs

ocean apex Feb 17, 2023, 2:39 PM

#

and "vserver show -vserver nfs_svm -fields data-services" gives you what?

feral gyro Feb 17, 2023, 2:40 PM

#

vserver show -vserver nfs_svm -fields data-services
vserver data-services

nfs_svm data-nfs,data-iscsi

ocean apex Feb 17, 2023, 2:41 PM

#

Oh, that is interesting. So no mention of management and Trident still works fine I guess?

feral gyro Feb 17, 2023, 2:45 PM

#

Yes, this is Trident lab. The mgmt lif and data lif are separate... ie. not mgmt-nfs. if you're not using iscsi, you can leave that off.

ocean apex Feb 17, 2023, 2:49 PM

#

But would a SVM setup with data-services "data-nfs" and LIF service-policy of "default-data-files" be enough for Trident?

#

I'm using ONTAP 9.11 by the way, if that makes a difference.

rugged wyvern Feb 17, 2023, 2:52 PM

#

If you only have one LIF you need to make sure the policies cover both management (aka API) and data for NFS. That's what the KB article was referring to.

ocean apex Feb 17, 2023, 2:55 PM

#

And what service would that be in case of Trident?
For management, I mean.

rugged wyvern Feb 17, 2023, 2:57 PM

#

Depends on what you have available based on the system services firewall policy show command

ocean apex Feb 17, 2023, 2:58 PM

#

I believe firewall policy is deprecated and replaced by service policy

rugged wyvern Feb 17, 2023, 3:01 PM

#

Then my knowledge is out of date. This may be a question for the ontap team. Ask for the data-serves needed to use both NFS and API management calls on a single LIF. That's what Trident will need.

ocean apex Feb 17, 2023, 3:02 PM

#

Ok, good idea. Thank you for taking your time. 🙏

ocean apex Feb 22, 2023, 12:42 PM

#

ONTAP SVM settings for Trident

#ONTAP SVM settings for Trident