設定LIF
您必須識別LIF、用於建立節點與備份應用程式之間的資料連線和控制連線。識別LIF之後、您必須確認是否已針對LIF設定防火牆和容錯移轉原則。
從ONTAP S振 分9.10.1開始、防火牆原則已過時、並完全由LIF服務原則取代。如需更多資訊、請參閱 "管理支援的流量"。 |
-
使用命令搭配
-service-policy`參數、識別節點上託管的叢集間 LIF `network interface show
。network interface show -service-policy default-intercluster
-
確保叢集間 LIF 包含 `backup-ndmp-control`以下服務:
network interface service-policy show
-
確保已針對叢集間的生命體設定適當的容錯移轉原則:
-
確認叢集間的生命體的容錯移轉原則已設定為
local-only
使用network interface show -failover
命令。cluster1::> network interface show -failover Logical Home Failover Failover Vserver Interface Node:Port Policy Group -------- --------------- ----------------- ------------ -------- cluster1 IC1 cluster1-1:e0a local-only Default Failover Targets: ....... IC2 cluster1-2:e0b local-only Default Failover Targets: ....... cluster1-1 cluster1-1_mgmt1 cluster1-1:e0m local-only Default Failover Targets: .......
-
如果未適當設定容錯移轉原則、請使用修改容錯移轉原則
network interface modify
命令-failover-policy
參數。cluster1::> network interface modify -vserver cluster1 -lif IC1 -failover-policy local-only
-
-
使用識別節點上託管的叢集間 LIF
network interface show
命令-role
參數。cluster1::> network interface show -role intercluster Logical Status Network Current Current Is Vserver Interface Admin/Oper Address/Mask Node Port Home ----------- ---------- ---------- ------------------ ------------- ------- ---- cluster1 IC1 up/up 192.0.2.65/24 cluster1-1 e0a true cluster1 IC2 up/up 192.0.2.68/24 cluster1-2 e0b true
-
確保在叢集間的LIF上啟用NDMP的防火牆原則:
-
使用驗證是否已啟用 NDMP 的防火牆原則
system services firewall policy show
命令。下列命令會顯示叢集間LIF的防火牆原則:
cluster1::> system services firewall policy show -policy intercluster Vserver Policy Service Allowed ------- ------------ ---------- ------------------- cluster1 intercluster dns - http - https - ndmp 0.0.0.0/0, ::/0 ndmps - ntp - rsh - ssh - telnet - 9 entries were displayed.
-
如果未啟用防火牆原則、請使用啟用防火牆原則
system services firewall policy modify
命令-service
參數。下列命令可啟用叢集間LIF的防火牆原則:
cluster1::> system services firewall policy modify -vserver cluster1 -policy intercluster -service ndmp 0.0.0.0/0
-
-
確保已針對叢集間的生命體設定適當的容錯移轉原則:
-
確認叢集間的生命體的容錯移轉原則已設定為
local-only
使用network interface show -failover
命令。cluster1::> network interface show -failover Logical Home Failover Failover Vserver Interface Node:Port Policy Group -------- --------------- ----------------- ------------ -------- cluster1 IC1 cluster1-1:e0a local-only Default Failover Targets: ....... IC2 cluster1-2:e0b local-only Default Failover Targets: ....... cluster1-1 cluster1-1_mgmt1 cluster1-1:e0m local-only Default Failover Targets: .......
-
如果未適當設定容錯移轉原則、請使用修改容錯移轉原則
network interface modify
命令-failover-policy
參數。cluster1::> network interface modify -vserver cluster1 -lif IC1 -failover-policy local-only
-