Skip to main content

network interface service-policy add-service

Contributors
Suggest changes
PDFs

Add an additional service entry to an existing service policy

Availability: This command is available to cluster administrators at the advanced privilege level.

Description

The network interface service-policy add-service command adds an additional service to an existing service-policy. When an allowed address list is specified, the list applies to only the service being added. Existing services included in this policy are not impacted.

Parameters

-vserver <vserver name> - Vserver (privilege: advanced)

Use this parameter to specify the name of the Vserver of the service policy to be updated.

-policy <text> - Policy Name (privilege: advanced)

Use this parameter to specify the name of service policy to be updated.

-service <LIF Service Name> - Service entry to be added (privilege: advanced)

Use this parameter to specify the name of service to be added to the existing service policy.

[-allowed-addresses <IP Address/Mask>,…​] - Allowed address ranges for the service (privilege: advanced)

Use this parameter to specify a list of subnet masks for addresses that are allowed to access this service. Use the value 0.0.0.0/0 to represent the wildcard IPv4 address and ::/0 to represent the wildcard IPv6 address.

Examples

The following example shows the addition of a service to an existing service policy.

cluster1::> network interface service-policy show -vserver cluster1
Vserver   Policy                     Service: Allowed Addresses
--------- -------------------------- ----------------------------------------
cluster1
          default-intercluster       intercluster-core: 0.0.0.0/0
                                     management-https: 0.0.0.0/0
default-management         management-core: 0.0.0.0/0
                                     management-autosupport: 0.0.0.0/0
                                     management-ssh: 0.0.0.0/0
                                     management-https: 0.0.0.0/0
default-route-announce     management-bgp: 0.0.0.0/0

3 entries were displayed.

cluster1::> network interface service-policy add-service -vserver cluster1 -policy default-intercluster -service management-ssh

cluster1::> network interface service-policy show -vserver cluster1
Vserver   Policy                     Service: Allowed Addresses
--------- -------------------------- ----------------------------------------
cluster1
          default-intercluster       intercluster-core: 0.0.0.0/0
                                     management-ssh: 0.0.0.0/0
                                     management-https: 0.0.0.0/0
default-management         management-core: 0.0.0.0/0
                                     management-autosupport: 0.0.0.0/0
                                     management-ssh: 0.0.0.0/0
                                     management-https: 0.0.0.0/0
default-route-announce     management-bgp: 0.0.0.0/0

3 entries were displayed.