Network management for ONTAP 9.8 and later contents
Decide whether to use this network management guide
Upgrade considerations
- Network features by release
- Verify your network configuration after upgrading
Networking components of a cluster
- Overview
- Network cabling guidelines
- Relationship between broadcast domains, failover groups, and failover policies
Workflow NAS path failover
- Overview
- Worksheet for NAS path failover configuration
- Create IPspaces
- Move broadcast domains
- Repair port reachability
- Create SVMs
- Create LIFs
- Configure DNS services
Configure network ports (cluster administrators only)
- Overview
- Combine physical ports to create interface groups
- Configure VLANs over physical ports
- Modify network port attributes
- Modify MTU setting for interface group ports
- Monitor the health of network ports
- Monitor the reachability of network ports
- Convert 40GbE NIC ports into multiple 10GbE ports for 10GbE connectivity
- Removing a NIC from the node
Configure IPspaces (cluster administrators only)
- Overview
- Example of using IPspaces
- Standard properties of IPspaces
- Create IPspaces
- Display IPspaces
- Delete an IPspace
Configure broadcast domains (cluster administrators only)
- Overview
- Example of using broadcast domains
- Add or remove ports from a broadcast domain
- Split broadcast domains
- Merge broadcast domains
- Change the MTU value for ports in a broadcast domain
- Display broadcast domains
- Delete a broadcast domain
Configure failover groups and policies for LIFs
- Overview
- Create a failover group
- Configure failover settings on a LIF
- Commands for managing failover groups and policies
Configure subnets (cluster administrators only)
- Overview
- Create a subnet
- Add or remove IP addresses from a subnet
- Change subnet properties
- Display subnets
- Delete a subnet
Configure LIFs (cluster administrators only)
- Overview
- What LIFs are
- LIFs and service policies
- Configure LIF service policies
- Create a LIF
- Modify a LIF
- Migrate a LIF
- Revert a LIF to its home port
- Recover from an incorrectly configured cluster LIF
- Delete a LIF
- Configure virtual IP (VIP) LIFs
Configure host-name resolution
- Overview
- Configure DNS for host-name resolution
- Manage the hosts table (cluster administrators only)
Balance network loads to optimize user traffic (cluster administrators only)
- Overview
- What DNS load balancing is
- How DNS load balancing works
- Create a DNS load balancing zone
- Add or remove a LIF from a load balancing zone
Secure your network
- Configure network security using Federal Information Processing Standards (FIPS)
- Configure IP security (IPsec) over wire encryption
- Configure firewall policies for LIFs
- Commands for managing firewall service and policies
Configure QoS marking (cluster administrators only)
- Overview
- DSCP marking for UC compliance
- Modify QoS marking values
- Display QoS marking values
Manage SNMP on the cluster (cluster administrators only)
- Overview
- What MIBs are
- SNMP traps
- Create an SNMP community and assign it to a LIF
- Configure SNMPv3 users in a cluster
- Configure traphosts to receive SNMP notifications
- Commands for managing SNMP
Manage routing in an SVM
- Overview
- Create a static route
- Enable multipath routing
- Delete a static route
- Display routing information
- Remove dynamic routes from routing tables
ONTAP port usage on a storage system
- Overview
- Network ports
- ONTAP internal ports
View network information
- Overview
- Display network port information (cluster administrators only)
- Display information about a VLAN (cluster administrators only)
- Display interface group information (cluster administrators only)
- Display LIF information
- Display routing information
- Display DNS host table entries (cluster administrators only)
- Display DNS domain configurations
- Display information about failover groups
- Display LIF failover targets
- Display LIFs in a load balancing zone
- Display cluster connections
- Commands for diagnosing network problems
- Display network connectivity with neighbor discovery protocols
Get more information

Configure failover settings on a LIF

12/14/2020 Download PDF of this page

You can configure a LIF to fail over to a specific group of network ports by applying a failover policy and a failover group to the LIF. You can also disable a LIF from failing over to another port.

About this task

When a LIF is created, LIF failover is enabled by default, and the list of available target ports is determined by the default failover group and failover policy based on the LIF type and service policy.

Starting with 9.5, you can specify a service policy for the LIF that defines which network services can use the LIF. Some network services impose failover restrictions on a LIF.

If a LIF’s service policy is changed in a way that further restricts failover, the LIF’s failover policy is automatically updated by the system.
You can modify the failover behavior of LIFs by specifying values for the -failover-group and -failover-policy parameters in the network interface modify command.
Modification of a LIF that results in the LIF having no valid failover target results in a warning message.

If a LIF that does not have a valid failover target attempts to fail over, an outage might occur.
The following list describes how the -failover-policy setting affects the target ports that are selected from the failover group:
- broadcast-domain-wide applies to all ports on all nodes in the failover group.
- system-defined applies to only those ports on the LIF’s home node and one other node in the cluster, typically a non- SFO partner, if it exists.
- local-only applies to only those ports on the LIF’s home node.
- sfo-partner-only applies to only those ports on the LIF’s home node and its SFO partner.
- disabled indicates the LIF is not configured for failover.
  
  Logical interfaces for SAN protocols do not support failover, therefore, these LIFs are always set to disabled.

Step

Configure failover settings for an existing interface:

network interface modify -vserver <vserver_name> -lif <lif_name> -failover-policy <failover_policy> -failover-group <failover_group>

Examples of configuring failover settings and disabling failover

The following command sets the failover policy to broadcast-domain-wide and uses the ports in failover group fg3 as failover targets for LIF data1 on SVM vs3:

network interface modify -vserver vs3 -lif data1 failover-policy broadcast-domain-wide - failover-group fg3

network interface show -vserver vs3 -lif * -fields failover-group,failover-policy
vserver lif             failover-policy       failover-group
------- -------------- ---------------        --------------
vs3     data1          broadcast-domain-wide  fg3

The following command disables failover for LIF data1 on SVM vs3:

network interface modify -vserver vs3 -lif data1 failover-policy disabled