Skip to main content

Disable FC-SP-3 on FC LIFs before reverting from ONTAP 9.20.1

Contributors netapp-aherbin
PDFs

Beginning with ONTAP 9.20.1, ONTAP supports Fibre Channel Security Protocol 3 (FC-SP-3) authentication and encryption using Broadcom secure host bus adapters (HBAs) with AFF and FAS systems. If FC or NVMe/FC network interfaces (LIFs) are enabled for FC-SP-3 on your ONTAP system, you must disable it before reverting to ONTAP 9.19.1.

Steps

  1. Verify the FC-SP-3 configuration on your LIFs:

    network interface show -fields fc-transport-security

  2. If the status of the transport-security-state field is not available, no further action is required. If the status is mandatory or preferred, modify it to disabled:

    network interface modify -vserver <vserver_name> -lif <lif_name> -fc-transport-security disabled

  3. Verify that FC-SP-3 is disabled on the previously enabled LIFs:

    network interface show -fields fc-transport-security