Skip to main content
A newer release of this product is available.

network interface service-policy create

Contributors
Suggest changes
PDFs

Create a new service policy

Availability: This command is available to cluster administrators at the advanced privilege level.

Description

The network interface service-policy create command creates a new service policy with a list of included services. LIFs can reference this policy to control the list of services that they are able to transport on their network. Services can represent applications accessed by a LIF as well as applications served by this cluster.

Parameters

-vserver <vserver name> - Vserver

Use this parameter to specify the name of the Vserver on which the service policy will be created.

-policy <text> - Policy Name

Use this parameter to specify the name of service policy to be created.

[-services <LIF Service Name>,…​] - Included Services

Use this parameter to specify a list of services that should be included in this policy.

[-allowed-addresses <IP Address/Mask>,…​] - Allowed Addresses

Use this parameter to specify a list of subnet masks for addresses that are allowed to access the services in this policy. Use the value 0.0.0.0/0 to represent the wildcard IPv4 address and ::/0 to represent the wildcard IPv6 address.

Examples

The following example shows the creation of a service policy with no initial services.

cluster1::> network interface service-policy create -vserver cluster1 -policy empty

cluster1::> network interface service-policy show
Vserver   Policy                 Service: Allowed Addresses
--------- ---------------------- ------------------------------------------
cluster1
          empty                  -
net-intercluster       intercluster-core: 0.0.0.0/0

2 entries were displayed.

The following example shows the creation of a new service policy with a specified service list.

cluster1::> network interface service-policy create -vserver cluster1 -policy metrocluster -services repl-mcc-nvlog,repl-mcc-storage

cluster1::> network interface service-policy show
Vserver   Policy                 Service: Allowed Addresses
--------- ---------------------- ------------------------------------------
cluster1
          empty                  -
metrocluster           repl-mcc-nvlog: 0.0.0.0/0
                                 repl-mcc-storage: 0.0.0.0/0
net-intercluster       intercluster-core: 0.0.0.0/0

3 entries were displayed.