Network Commands
Network Commands
network ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
network ping6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
network test-path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
network traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
network traceroute6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Description
The network ping command displays whether a remote address is reachable and responsive, the (if
specified) number of transmitted and received packets, and their round-trip time. The command requires a
source node or logical interface from where the ping will be run, and a destination IP address. You can specify
the source node by name, or a logical interface and its Vserver.
Parameters
{ -node <nodename> - Node
Use this parameter to send the ping from the node you specify.
1
[-packet-size <integer>] - Packet Size
Use this parameter to specify the number of data bytes to be sent in the ping packet. The default is 56
bytes, which is 64 ICMP data bytes total after 8 bytes of ICMP header data is added.
Examples
This example shows a ping from node xena to the destination server 10.98.16.164 with the server responding
that it is up and running.
network ping6
Ping an IPv6 address
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The network ping6 command uses the ICMPv6 protocol’s mandatory ICMP6_ECHO_REQUEST datagram
to elicit an ICMP6_ECHO_REPLY from a host or gateway. ICMP6_ECHO_REQUEST datagrams ("pings")
have an IPv6 header, and ICMPv6 header formatted as documented in RFC2463.
2
Parameters
{ -node <nodename> - Node Name
Use this parameter to originate ping6 from the specified node.
3
[-s, -show-detail <true>] - Show Detail Output
Use this parameter to display detailed output about the ping.
Examples
This example shows a ping6 from node 'node1' to the destination server ipv6.google.com with the server
responding that it is up and running.
network test-path
Test path performance between two nodes
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network test-path command runs a performance test between two nodes. The command requires a
source node, destination node, destination cluster, and application, or session type. All tests are run using
intracluster or intercluster LIFs, depending on whether the test is between two nodes in the same cluster, or
between nodes in peered clusters.
The test itself is different from most bandwidth test tools. It creates a "session" consisting of TCP connections
between all possible paths between the nodes being tested. This is how internal Data ONTAP applications
communicate between nodes. This means the test is using multiple paths, and thus the bandwidth reported
might exceed the capacity of a single 10 Gb path.
Parameters
-source-node {<nodename>|local} - Node Initiating Session
Use this parameter to specify the node that initiates the test. Source-node parameter must be a member of
the cluster in which the command is run.
4
-destination-node <text> - Remote Node in Destination Cluster
Use this parameter to specify the destination node in the destination cluster
Examples
The following example runs a test between two nodes in the same cluster:
network traceroute
Traceroute
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The network traceroute command performs a network probe from a node to a specified IP address. The
command requires a source node or logical interface and a destination IP address. You can specify the source
node by name, or specify a logical interface and its Vserver. The traceroute is performed between the source
and destination.
Parameters
{ -node <nodename> - Node
Use this parameter to originate the traceroute from the node you specify.
5
| -lif <lif-name> - Logical Interface }
Use this parameter to originate the traceroute from the specified network interface.
Examples
This example shows a traceroute from node node1 to a destination address of 10.98.16.164, showing a
maximum of five hops.
6
network traceroute6
traceroute6
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The network traceroute6 command performs a network probe from a node to a specified IPv6 address.
The command requires a source node or logical interface, Vserver from where traceroute6 will originate and a
destination IPv6 address. traceroute6 is performed between the source and destination.
Parameters
{ -node <nodename> - Node
Use this parameter to originate traceroute6 from the node you specify. This parameter is available only to
cluster administrators.
7
[-m, -hop-limit <integer>] - Maximum Number of Hops
Use this parameter to specify the maximum hoplimit, upto 255. The default value is 64 hops.
Examples
The following example shows traceroute6 from node node1 to the destination
fd20:8b1e:b255:4071:d255:1fcd:a8cd:b9e8.
Description
The network arp create command creates a static ARP entry for a given Vserver. Statically created ARP
8
entries will be stored permanently in the Vserver context and will be used by the network stack.
Parameters
Examples
The following example creates a static ARP entry on Vserver vs1 for the remote host with the IP address
10.63.0.2 having MAC address 40:55:39:25:27:c1
Description
The network arp delete command deletes static ARP entries from the Vserver and from the network
stack.
Parameters
Examples
The following example deletes the ARP entry for IP address 10.63.0.2 from the Vserver vs1.
9
network arp show
Display static ARP entries
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The network arp show command displays static ARP entries present in a given Vserver. This command will
not display dynamically learnt ARP entries in the network stack. Use the network arp active-entry show
command to display dynamically learned ARP entries in the network stack.
Parameters
{ [-fields <fieldname>,…]
Use this parameter to display only certain fields of the ARP table.
| [-instance ] }
Use this parameter to display all the fields of the ARP table.
Examples
The following example displays static ARP entries from the Vserver vs1.
Related Links
10
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network arp active-entry delete command deletes dynamically learned ARP entries from the
network stack of a node. To delete statically configured ARP entries use the network arp delete command.
Parameters
Examples
The following example deletes the active ARP entry with an IP address of 10.224.64.1, subnet group of
0.0.0.0/0, port e0c on node node2 in the Admin Vserver cluster1:
Related Links
Description
The `network arp active-entry show ` command displays ARP entries present in the network stack of the node.
The entries includes both dynamically learned ARP entries and user configured static ARP entries.
11
Parameters
{ [-fields <fieldname>,…]
Use this parameter to display only certain fields of the active ARP table.
| [-instance ] }
Use this parameter to display all the fields of the active ARP table.
Examples
The following example displays active ARP entries for the Admin Vserver cluster1:
Node: node-01
Vserver: cluster1
Subnet Group: 169.254.0.0/16
Remote IP Address MAC Address Port
----------------- ----------------- -------
169.254.106.95 0:55:39:27:d1:c1 lo
12
network bgp config create
Create BGP configuration
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network bgp config create command is used to create the border gateway protocol (BGP)
configuration for a node. It can be used to override the BGP parameters defined in the global BGP defaults.
Parameters
Examples
cluster1::> network bgp config create -node node1 -asn 10 -hold-time 180
-router-id 10.0.1.112
Description
The network bgp config delete command deletes a node’s border gateway protocol (BGP)
configuration. A BGP configuation cannot be deleted if there are BGP peer groups configured on the
associated node.
Parameters
13
Examples
Description
The network bgp config modify command is used to modify a node’s border gateway protocol (BGP)
configuration.
Parameters
Examples
cluster1::> network bgp config modify -node node1 -router-id 1.1.1.1 -asn
20
Description
The network bgp config show command displays the border gateway protocol (BGP) configuration for
each node.
14
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
Description
The network bgp defaults modify command modifies the global defaults for border gateway protocol
(BGP) configurations.
Parameters
15
[-hold-time <integer>] - Hold Time
This parameter specifies the hold time in seconds. The default value is 180.
Examples
Description
The network bgp defaults show command displays the global defaults for border gateway protocol
(BGP) configurations.
Examples
Description
The network bgp peer-group create command is used to create a border gateway protocol (BGP) peer
group. A BGP peer group will advertise VIP routes for the list of vservers in the peer group’s vserver-list
using the BGP LIF of the peer group. A BGP peer group will advertise VIP routes to a peer router using the
border gateway protocol. The address of the peer router is identfied by the peer-address value.
Parameters
16
-bgp-lif <lif-name> - BGP LIF
This parameter specifies the BGP interface (BGP LIF) of the peer group being created.
Examples
Description
The network bgp peer-group delete command is used to delete border gateway protocol (BGP) peer
group configuration.
Parameters
Examples
17
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network bgp peer-group modify command is used to modify a border gateway protocol (BGP) peer
group configuration.
Parameters
Examples
Description
The network bgp peer-group rename command is used to assign a new name to a BGP peer group.
Parameters
Examples
18
cluster1::> network bgp peer-group rename -peer-group old_name -new-name
new_name
Description
The network bgp peer-group show command displays the BGP peer groups configuration.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
19
[-route-preference <integer>] - Route Preference
This parameter selects peer groups that match the specified route preference value.
Examples
Description
The network bgp vserver-status show command displays the per-node border gateway protocol
(BGP) status for each vserver. The BGP status for a particular vserver is "up" when at least one BGP peer
group supporting that vserver is able to communicate with its peer router.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
20
[-ipv6-status {unknown|unconfigured|up|down}] - IPv6 status
This parameter selects the BGP status that matches the specified status for IPv6 address family.
Examples
Description
The network cloud routing-table create command creates a new external routing table.
Parameters
Examples
Description
The network cloud routing-table delete deletes an existing external routing table.
Parameters
21
-route-table-id <text> - Route Table ID
This parameter is used to provide the name of an existing external routing table to be deleted.
Examples
Description
The network cloud routing-table show command retrieves the configured routing tables on mediator
and displays them.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example shows external routing tables, for this cluster, that are configured on the mediator
22
network connections commands
network connections active show-clients
Show a count of the active connections by client
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The network connections active show-clients command displays information about client
connections, including the client’s IP address and the number of client connections.
The results of this command set are refreshed independently every 30 seconds and might not
reflect the immediate state of the system.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
23
cluster1::> network connections active show-clients
Node Vserver Name Client IP Address Count
------ -------------- ----------------- ------
node0 vs1 192.0.2.253 1
vs2 192.0.2.252 2
vs3 192.0.2.251 5
node1 vs1 192.0.2.250 1
vs2 192.0.2.252 3
vs2 customer.example.com 4
Description
The network connections active show-lifs command displays the number of active connections on
each logical interface, organized by node and Vserver.
The results of this command set are refreshed independently every 30 seconds and might not
reflect the immediate state of the system.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
24
[-blocked-count <integer>] - (DEPRECATED)-Load Balancing Blocking Count
This parameter has been deprecated and may be removed in a future version of Data
ONTAP.
Use this parameter to display information only about data logical interfaces blocked from migrating and the
connection that is blocking it.
Examples
The following example displays information about the servers and logical interfaces being used by all active
connections:
25
cluster1::*> network connections active show-lifs
LB Migrate
Node Vserver Name Interface Name Count Blocking
-------- ------------ --------------- ------ ----------
node0
vs0 datalif1 3 0
vs0 cluslif1 6 0
vs0 cluslif2 5 2
node1
vs0 datalif2 3 0
vs0 cluslif1 3 0
vs0 cluslif2 5 0
node2
vs1 datalif2 1 0
vs1 cluslif1 5 0
vs1 cluslif2 3 2
node3
vs1 datalif1 1 0
vs1 cluslif1 2 0
vs1 cluslif2 1 0
Description
The network connections active show-protocols command displays the number of active
connections per protocol, organized by node.
The results of this command set are refreshed independently every 30 seconds and might not
reflect the immediate state of the system.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
26
[-vserver <vserver>] - Vserver
This parameter is used by the system to break down the output per vserver.
Examples
The following example displays information about all network protocols being used by active connections:
Description
The network connections active show-services command displays the number of active
connections by protocol service, organized by node.
The results of this command set are refreshed independently every 30 seconds and might not
reflect the immediate state of the system.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
27
[-node {<nodename>|local}] - Node
Use this parameter to display information only about the connections on the node you specify.
Examples
The following example displays information about all protocol services being used by active connections:
Description
The network connections active show command displays information about active network
connections.
The results of this command set are refreshed independently every 30 seconds and might not
reflect the immediate state of the system.
28
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-print-ip-addresses ]
Print IP addresses for remote hosts — do not attempt to resolve the addresses to a hostname.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
29
[-lru {yes|no}] - Least Recently Used
Selects the connections that match this parameter value.
Examples
The following example displays information about active network connections for the node named node0:
30
cluster1::*> network connections active show node -node0
Blocks
Vserver Interface Remote LB
Name Name:Local Port IP Address:Port Protocol/Service Migrate
------- ---------------- ----------------- ---------------- -------
node0 cluslif1:7070 192.0.2.253:48621 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.253:48622 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.252:48644 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.250:48646 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.245:48621 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.245:48622 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.251:48644 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.251:48646 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.248:48621 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.246:48622 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.252:48644 UDP/rclopcp false
node0 cluslif2:7070 192.0.2.250:48646 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.254:48621 UDP/rclopcp false
node0 cluslif1:7070 192.0.2.253:48622 UDP/rclopcp false
[...]
Description
The network connections listening show command displays information about network connections
that are in an open and listening state.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
31
[-vserver <vserver>] - Vserver
Selects the listening connections that match this parameter value.
Examples
The following example displays information about all listening network connections:
32
cluster1::> network connections listening show
Vserver Name Interface Name:Local Port Protocol/Service
------------ -------------------------- -----------------
node0 cluslif1:7700 UDP/rclopcp
node0 cluslif2:7700 UDP/rclopcp
node1 cluslif1:7700 UDP/rclopcp
node1 cluslif2:7700 UDP/rclopcp
node2 cluslif1:7700 UDP/rclopcp
node2 cluslif2:7700 UDP/rclopcp
node3 cluslif1:7700 UDP/rclopcp
node3 cluslif2:7700 UDP/rclopcp
8 entries were displayed.
The following example displays detailed information about listening network connections for the node named
node0:
33
network device-discovery commands
network device-discovery show
Display device discovery information
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network device-discovery show command displays information about discovered devices. This information
may be useful in determining the network topology or investigating connectivity issues. By default, the
command displays the following information:
• Local interface
• Discovered device
• Discovered interface
• Discovered platform
Parameters
{ [-fields <fieldname>,…]
Include the specified field or fields in the command output. Use '-fields ?' to display the valid fields.
| [-instance ] }
Use this parameter to display detailed information about all fields.
34
[-platform <text>] - Discovered Device Platform
Displays the discovery ports that contain the platform of discovered devices. For example: N5K-C5010P-BF
[-capabilities {router|trans-bridge|source-route-
bridge|switch|host|igmp|repeater|phone}] - Discovered Device Capabilities
Displays the discovered devices that match the capability or capabilities. Possible values:
• "router" - Router
• "trans-bridge" - Trans Bridge
• "source-route-bridge" - Source Route Bridge
• "switch" - Switch
• "host" - Host
• "igmp" - IGMP
• "repeater" - Repeater
• "phone" - Phone
Examples
35
cluster1::> network device-discovery show
Description
36
The adapter argument is in the form Xy or Xy_z where X and z are integers and y is a letter. An example is 4a
or 4a_1.
You cannot bring an adapter offline until all logical interfaces connected to that adapter are offline. Use the
network interface modify command to take your logical interfaces offline.
The speed option sets the Fibre Channel link speed of an adapter. You can set adapters that support:
• 10Gb/s to 10 or auto
• 8Gb/s to 2, 4, 8 or auto
• 4Gb/s to 2, 4 or auto
• 2Gb/s to 2 or auto
By default, the link speed option is set to auto for auto negotiation. Setting the link speed to a specific value
disables auto negotiation. Under certain conditions, a speed mismatch can prevent the adapter from coming
online.
The system reports the actual link speed with the "Data Link Rate (Gbit)" field in the output of
network fcp adapter show-instance .
Parameters
Examples
Related Links
37
network fcp adapter show
Display FCP adapters
Availability: This command is available to cluster administrators at the admin privilege level.
Description
Displays FCP target adapter information. You can also use this information to determine if adapters are active
and online.
The adapter argument is in the form Xy or Xy_z where X and z are integers and y is a letter. An example is 4a
or 4a_1.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
38
[-status-extended <text>] - Extended Status
If this parameter is specified, the command displays information only about the FCP target adapters that
match the specified extended status.
39
[-fc-wwpn <text>] - Adapter WWPN
If this parameter is specified, the command displays information only about the FCP target adapters that
match the specified world wide port name.
40
match the specified SFP connector type.
41
[-is-sfp-rx-in-los {true|false}] - Is Receiver In LOS
If this parameter is specified, the command displays information only about the FCP target adapters that
match whether the observed SFP receiver is in loss of signal state.
Examples
The example above displays information regarding FCP adapters within cluster1.
42
Validity Of Transceiver: true
Connector Used: LC
Encoding Used: 64B66B
Is Internally Calibrated: true
Diagnostic Monitoring Type: 68
Status Monitoring Available: fa {Rx_Loss_of_Sig, Tx_Fault, Tx_Disable}
SFF-8472 Compliance: 5
Received Optical Power: 441.3 (uWatts)
Is Received Power In Range: true
SFP Transmitted Optical Power: 600.4 (uWatts)
Is Xmit Power In Range: true
DDM Status: 30
Is Xmit Disabled: false
Is Xmit In Fault: false
Is Receiver In LOS: false
The example above displays detailed information regarding FCP adapter 0a in sti6280-021 within cluster1.
Description
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
43
[-port-wwpn <text>] - Port WWPN
Use this parameter to select the interconnect elements with the specified port world wide name.
[-port-type {None|N-Port|NL-Port|FNL-Port|NX-Port|F-Port|FL-Port|E-Port|B-
Port|TNP-Port|TF-Port|NV-Port|FV-Port|SD-Port|TE-Port|TL-Port}] - Port Type
Use this parameter to select the interconnect elements with the specified port type.
Examples
44
cluster1::> network fcp topology show
Switch connected to the adapter 0c
Switch Name: ssan-fc0e-d58
Switch Vendor: Cisco Systems, Inc.
Switch Release: 5.2(1)N1(9)
Switch Domain: 4
Switch WWN: 20:05:00:05:9b:26:f4:c1
Port Count: 20
The example above show FCP topology interconnect information for the cluster.
45
Description
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
46
[-zone-member-count <integer>] - Zone Member Count
Use this parameter to select the active zone set information with the specified number of zone members in
a zone.
Examples
The example above displays information regarding active zone set information for the cluster.
Description
A logical interface is an IP address associated with a physical network port. For logical
interfaces using NAS data protocols, the interface can fail over or be migrated to a different
physical port in the event of component failures, thereby continuing to provide network access
despite the component failure. Logical interfaces using SAN data protocols do not support
migration or failover.
47
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
Use this parameter to specify the role of the LIF. LIFs can have one of five roles:
LIFs with the cluster-management role behave as LIFs with the node-management role except that cluster-
management LIFs can failover between nodes.
The data-protocol field must be specified when the LIF is created and cannot be modified
later.
The NFS protocol relies on firewall services included in the built-in "data" and "mgmt-nfs"
firewall policies. Assigning a different firewall policy might disrupt some NFS client
implementations.
48
{ -netmask <IP Address> - Netmask
Use this parameter to specify the LIF’s netmask.
[-failover-policy {system-defined|local-only|sfo-partner-only|disabled|broadcast-
domain-wide}] - Failover Policy
Use this parameter to specify the failover policy for the LIF.
• system-defined - The system determines appropriate failover targets for the LIF. The default behavior is
that failover targets are chosen from the LIF’s current hosting node and also from one other non-parter
node when possible.
• local-only - The LIF fails over to a port on the local or home node of the LIF.
• sfo-partner-only - The LIF fails over to a port on the home node or SFO partner only.
• broadcast-domain-wide - The LIF fails over to a port in the same broadcast domain as the home port.
• disabled - Failover is disabled for the LIF.
The failover policy for cluster logical interfaces is local-only and cannot be changed. The default failover
policy for data logical interfaces is system-defined. This value can be changed.
Logical interfaces for SAN protocols do not support failover. Thus, such interfaces will always
show this parameter as disabled .
49
[-firewall-policy <policy>] - Firewall Policy
Use this parameter to specify the firewall policy for the LIF. A LIF can use a default firewall policy that
corresponds to its role (management, cluster, intercluster, or data) or a custom firewall policy created by an
administrator. View and modify existing firewall policies using the system services firewall policy show and
system services firewall policy modify commands, respectively.
The NFS data protocol relies on firewall services included in the built-in "data" and "mgmt-
nfs" firewall policies. Assigning a different firewall policy might disrupt some NFS client
implementations.
Logical interfaces for SAN traffic do not support auto-revet. Thus, this parameter is always
false on such interfaces.
Use this parameter to specify whether load balancing migration is activated for this data LIF. The default
value of this parameter is false . If you set the value of this parameter to true , automatic revert capability
for this data LIF is disabled (the -auto-revert parameter is set to false ). Also, data LIFs that migrate
as a result of load balancing adhere to network interface failover rules.
During times when a LIF is hosting active NFSv4, CIFS, or NRV connections, load balancing
based LIF migrations between nodes will be temporarily disabled.
50
[-failover-group <failover-group>] - Failover Group Name
Use this parameter to specify the name of the failover group to associate with the LIF. Manage failover
groups by using the network interface failover-groups command. Each broadcast domain has a
default failover group which is created by the system automatically and has the same name as the
broadcast domain. The failover group associated with the broadcast domain includes all ports in the
broadcast domain. A logical interface’s failover group is set to the failover group of the home port’s
broadcast domain by default, but this value can be modified.
Logical interfaces for SAN protocols do not support failover. Thus, this parameter cannot be
specified for such interfaces.
Examples
The following example creates an IPv4 LIF named datalif1 and an IPv6 LIF named datalif2 on a Vserver
named vs0. Their home node is node0 and home port is e0c. The failover policy broadcast-domain-wide
is assigned to both LIFs. The firewall policy is data and the LIFs are automatically reverted to their home node
at startup and under other circumstances. The datalif1 has the IP address 192.0.2.130 and netmask
255.255.255.128, and datalif2 has the IP address 3ffe:1::aaaa and netmask length of 64.
cluster1::> network interface create -vserver vs0 -lif datalif1 -role data
-home-node node0 -home-port e0c -address 192.0.2.130 -netmask
255.255.255.128 -failover-policy broadcast-domain-wide -firewall-policy
data -auto-revert true
cluster1::> network interface create -vserver vs0 -lif datalif2 -role data
-home-node node0 -home-port e0c -address 3ffe:1::aaaa -netmask-length 64
-failover-policy broadcast-domain-wide -firewall-policy data -auto-revert
true
51
Related Links
Description
The network interface delete command deletes a logical interface (LIF) from a Vserver. Only
administratively down LIFs can be deleted. To make a LIF administratively down, use the network interface
modify command to set the "status-admin" parameter to "down".
If the LIF is configured for a SAN protocol and is part of a port set, the LIF must be removed
from the port set before it can be deleted. To determine if a LIF is in a port set, use the lun
portset show command. To remove the LIF from the port set, use the lun portset remove
command.
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
Examples
The following example deletes a logical interface named cluslif3 that is located on a Vserver named vs0.
Related Links
52
network interface migrate-all
Migrate all data logical interfaces away from the specified node
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network interface migrate-all command migrates all data logical interfaces from the node you
specify.
Manual migration of a logical interface can take up to 15 seconds to complete. Logical interface
migration is a best-effort command and can only be completed if the destination node and port
are operational. Logical interface migration requires that the logical interface be pre-configured
with valid failover rules to facilitate failover to a remote node.
Logical interfaces for SAN protocols do not support migration. Attempts to do so will result in an
error.
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
Examples
The following example migrates all data logical interfaces from the current (local) node.
Description
The network interface migrate command migrates a logical interface to a port or interface group on the
node you specify.
53
Manual migration of a logical interface can take up to 15 seconds to complete. Also, when you
migrate a cluster logical interface, you must do so from the local node. Logical interface
migration is a best-effort command, and can only be completed if the destination node and port
are operational
Logical interfaces for SAN protocols do not support migration. Attempts to do so will result in an
error.
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
Examples
The following example migrates a logical interface named datalif1 on a Vserver named vs0 to port e0c on a
node named node2:
Description
The network interface modify command modifies attributes of a logical interface (LIF).
54
You cannot modify some properties of an iSCSI or FCP LIF, such as -home-node or -home
-port , if the LIF is in a port set. To modify these properties, first remove the LIF from the port
set. To determine if a LIF is in a port set, use the lun portset show command. To remove the LIF
from the port set, use the lun portset remove command.
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
If you change this parameter for a cluster or management LIF, you must reboot the storage
system to force the change to take effect.
55
[-failover-policy {system-defined|local-only|sfo-partner-only|disabled|broadcast-
domain-wide}] - Failover Policy
Use this parameter to modify the failover policy for the LIF.
• system-defined - The system determines appropriate failover targets for the LIF. The default behavior is
that failover targets are chosen from the LIF’s current hosting node and also from one other non-partner
node when possible.
• local-only - The LIF fails over to a port on the local or home node of the LIF.
• sfo-partner-only - The LIF fails over to a port on the home node or SFO partner only.
• broadcast-domain-wide - The LIF fails over to a port in the same broadcast domain as the home port.
• disabled - Failover is disabled for the LIF.
The failover policy for cluster logical interfaces is local-only and cannot be changed. The
default failover policy for data logical interfaces is system-defined. This value can be
changed.
Logical interfaces for SAN protocols do not support failover. Thus, such interfaces always
show this parameter as disabled .
The NFS data protocol relies on firewall services included in the built-in "data" and "mgmt-
nfs" firewall policies. Assigning a different firewall policy policy might disrupt some NFS client
implementations.
Logical interfaces for SAN traffic do not support auto-revert. Thus, this parameter is always
false on such interfaces.
56
true.
Use this parameter to modify whether or not load balancing migration is enabled for this data LIF. The
default value of this parameter is false . If you set the value of this parameter to true , the automatic
revert capability of the data LIF is disabled (the -auto-revert parameter is set to false ). Also, data
LIFs that migrate as a result of load balancing adhere to network interface failover rules.
During times when a LIF is hosting active NFSv4, CIFS, or NRV connections, load balancing
based LIF migrations between nodes will be temporarily disabled.
Logical interfaces for SAN protocols do not support failover. Thus, this parameter cannot be
specified for such interfaces.
Examples
The following example modifies a LIF named datalif1 on a logical server named vs0. The LIF’s netmask is
modified to 255.255.255.128.
57
cluster1::> network interface modify -vserver vs0 -lif datalif1 -netmask
255.255.255.128
Related Links
Description
Use the network interface rename command to change the name of an existing logical interface.
Parameters
Examples
The following example renames a cluster logical interface named cluslif1 to cluslif4 on a Vserver named vs0.
58
Description
The network interface revert command reverts a logical interface that is not currently on its home port
to its home port, assuming that the home node and port are both operational. A logical interface’s home port is
specified when the logical interface is created. Determine a logical interface’s home port by using the network
interface show command.
When you revert a cluster logical interface, you must do so from the local node.
On some cloud platforms, this operation might perform changes to the external route tables.
Parameters
Logical interfaces for SAN protocols are always home. Thus, this command has no effect on
such interfaces. The same applies to logical interfaces for NAS protocols that are already
home.
Examples
The following example returns any logical interfaces that are not currently on their home ports to their home
ports.
Related Links
Description
The network interface show command displays information about logical interfaces.
Running the command with the -failover parameter displays information relevant to logical interface failover
rules.
Running the command with the -status parameter displays information relevant to logical interface
operational status.
59
Running the command with the -by-ipspace parameter displays information relevant to logical interfaces on
a specific IPspace.
You can specify additional parameters to display only information that matches those parameters. For
example, to display information only about logical interfaces whose operational status is down, run the
command with the -status-oper down parameter.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>,… parameter, the command displays only the fields that you
specify.
| [-by-ipspace ]
Use this parameter to display logical-interfaces sorted by IPspace and Vserver.
| [-dns-zones ]
Use this parameter to display logical-interfaces and whether the interface is associated with a Domain
Name System (DNS) load balancing zone.
| [-failover ]
Use this parameter to display logical-interface failover information.
| [-status ]
Use this parameter to display detailed logical-interface status information.
| [-instance ] }
Use this parameter to display all the fields for the specified logical-interfaces.
Use this parameter plus the -lif parameter to display detailed information only about the logical interface
you specify.
Use this parameter with the -vserver parameter to display detailed information only about the logical
interface you specify.
60
[-role {cluster|data|node-mgmt|intercluster|cluster-mgmt}] - (DEPRECATED)-Role
This parameter has been deprecated and may be removed in a future version of ONTAP.
Use either the -service-policy or -services parameter instead.
Use this parameter to display information only about logical interfaces that are associated with network
ports that have the role you specify.
61
[-status-extended <text>] - Extended Status
Use this parameter to display information only about logical interfaces that match the extended status that
you specify.
[-failover-policy {system-defined|local-only|sfo-partner-only|disabled|broadcast-
domain-wide}] - Failover Policy
Use this parameter to display information only about logical interfaces that use the failover policy you
specify.
Use this parameter to display information only about logical interfaces for which load balancing migration is
activated (true) or not activated (false).
62
[-lb-weight {load|0..100}] - Load Balanced Weight
Use this parameter to display information only about logical interfaces that have the load balancing weight
you specify.
Examples
The following example displays general information about all logical interfaces.
63
cluster1::> network interface show
Logical Status Network Current Current
Is
Vserver Interface Admin/Oper Address/Mask Node Port
Home
----------- ---------- ---------- ------------------ ------------- -------
----
cluster1
cluster_mgmt
up/up 192.0.2.1/192 node0 e0M
true
node0_mgmt1
up/up 192.0.2.2/192 node0 e0M
true
node1_mgmt1
up/up 192.0.2.3/192 node1 e0M
true
Cluster
node0_clus1
up/up 192.0.2.66/192 node0 e0a
true
node0_clus2
up/up 192.0.2.67/192 node0 e0b
true
node1_clus1
up/up 192.0.2.68/192 node1 e0a
true
node1_clus2
up/up 192.0.2.69/192 node1 e0b
true
The following example displays failover information about all logical interfaces.
64
cluster1::> network interface show -failover
Logical Home Failover Failover
Vserver Interface Node:Port Policy Group
-------- --------------- --------------------- ---------------
---------------
cluster1
cluster_mgmt node0:e0M broadcast-domain-wide
Default
Failover Targets: node0:e0M,
node0:e0d,
node0:e0e,
node0:e0f,
node1:e0M,
node1:e0d,
node1:e0e,
node1:e0f
node0_mgmt1 node0:e0M local-only Default
Failover Targets: node0:e0M,
node0:e0d,
node0:e0e,
node0:e0f
node1_mgmt1 node1:e0M local-only Default
Failover Targets: node1:e0M,
node1:e0d,
node1:e0e,
node1:e0f
Cluster
node0_clus1 node0:e0a local-only Cluster
Failover Targets: node0:e0a,
node0:e0b
node0_clus2 node0:e0a local-only Cluster
Failover Targets: node0:e0b,
node0:e0a
node1_clus1 node1:e0a local-only Cluster
Failover Targets: node1:e0a,
node1:e0b
node1_clus2 node1:e0a local-only Cluster
Failover Targets: node1:e0b,
node1:e0a
65
Description
The network interface start-cluster-check command initiates an accessibility check from every
logical interface to every aggregate. Automatic checks run periodically, but this command manually initiates a
check immediately.
This command produces no direct output. Any errors encountered during the check are reported in the event
log. See the event log show command for more information.
Examples
This example shows an execution of this command, with all parameters and output.
Related Links
Description
The network interface capacity show command displays the number of IP LIFs of role data
supported on the cluster, as well as the number of IP LIFs of role data currently configured on the cluster.
The number of IP LIFs of role data that are supported on a node depends on the hardware
platform and the Cluster’s Data ONTAP version. If one or more nodes in the cluster cannot
support additional LIFs, then none of the nodes in the cluster can support additional LIFs.
Examples
66
Description
The network interface capacity details show command displays the number of IP LIFs of role
data that can be configured on each node, the number of IP data LIFs of role data that are supported on
each node, and the number of IP data LIFs of role data that are configured to be homed on each node.
The number of IP LIFs of role data that are supported on a node depends on the hardware
platform and the Cluster’s Data ONTAP version. If one or more nodes in the cluster cannot
support additional LIFs, then none of the nodes in the cluster can support additional LIFs.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
[-capacity-for-node <integer>] - Number of IP data LIFs that can be configured on the node
This parameter specifies the number of IP LIFs of role data that can be configured on the node at the
currently running Data ONTAP version. To view the version of a node, use the cluster image show
command.
[-limit-for-node <integer>] - Number of IP data LIFs that are supported on the node
This parameter specifies the number of IP LIFs of role data that are supported on the node at the current
effective cluster version (ECV). To view the version of a node, use the cluster image show command.
[-count-for-node <integer>] - Number of IP data LIFs that are assigned to the node
This parameter specifies the number of IP LIFs of role data currently configured to be homed on the node.
To view LIFs homed on this node, use the network interface show -home-node command.
Examples
67
Related Links
Description
This command identifies logical interfaces (LIFs) at risk of becoming inaccessible if their hosting nodes were to
experience an outage. The source-nodes parameter is the only required input.
The tuple <destination-nodes, vserver-name, lif-name> is sufficient to uniquely identify a record in the returned
listing. All fields other than source-nodes can be filtered on in the usual fashion. There are some examples of
this filtering below.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Note that the number of LIFs considered to be at risk may be higher than the actual amount over capacity a
given set of nodes is. Once a given set of nodes is determined to be potentially over capacity, all LIFs
whose set of failover target nodes is an exact match are marked as at risk. The amount over capacity is an
upper bound on the number LIFs which could become unhosted if LIFs were to fail over in a random order,
68
each to a target randomly selected from that LIF’s configured failover targets.
[-failover-policy {system-defined|local-only|sfo-partner-only|disabled|broadcast-
domain-wide}] - Failover Policy
Use this parameter to display information only about at-risk LIFs whose failover-policy you specify.
Examples
The following example shows all the at-risk LIFs for a specific two-node outage in a six-node cluster.
The following example shows the same two-node outage scenario, but now with some filtering applied to the
results.
69
cluster1::> network interface check failover show -source-nodes
node1,node5 -destination-nodes node2,node3,node4,node6 -failover-group
Def*
Description
The network interface dns-lb-stats show command displays the statistics for DNS load-balancing
lookups for the zones belonging to the specified Vserver. These statistics represent the data for the Vserver on
the local node. The following counts can be seen in the statistics output:
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
70
[-vserver <vserver>] - Vserver
Use this parameter to display DNS load-balancer statistics only for the specified Vservers.
Examples
71
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network interface failover-groups add-targets command enables you to add a list of
failover targets such as network ports, interface groups, or VLANs to an existing logical interface failover
group.
Parameters
Examples
This example shows the failover group "clyde" being extended to include additional failover targets.
Description
The network interface failover-groups create command creates a grouping of failover targets for
logical interfaces on one or more nodes. Use this command to add a new network port or interface group to an
existing failover group.
Interfaces for SAN protocols do not support failover. Such interfaces are not valid failover
targets.
Parameters
72
-targets [node>:<port],… - Failover Targets
Use this parameter to specify the list of failover targets (network ports, interface groups, or VLANs on a
node) belonging to this failover group.
Examples
The following example shows how to create a failover group named failover-group_2 containing ports e1e and
e2e on node Xena.
Description
The network interface failover-groups delete command deletes a logical interface failover group.
Parameters
Examples
The following example shows how to delete a failover group named failover-group_2.
Description
The network interface failover-groups modify command enables you modify the list of network
ports, interface groups, or VLANs belonging to an existing logical interface failover group. The specified list will
overwrite the existing list of network ports, interface groups, and VLANs currently belonging to the logical
73
interface failover group.
Parameters
Examples
This example shows the failover group "clyde" being modified to now contain the specified network ports.
Description
The network interface failover-groups remove-targets command enables you to specify a list of
failover targets such as network ports, interface groups, or VLANs to be removed from an existing logical
interface failover group.
Parameters
Examples
This example shows the failover targets xena1:e0c and xena1:e0d-100 being removed from the failover group
"clyde".
74
cluster1::> network interface failover-group remote-targets -vserver vs1
-failover-group clyde -targets xena1:e0c, xena1:e0d-100, xena2:a0a
Description
The network interface failover-groups rename command enables you to rename an existing
logical interface failover group.
Parameters
Examples
This example shows the failover group "clusterwide" being renamed "clyde".
Description
The network interface failover-groups show command displays information about logical interface
failover groups.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
75
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example displays information about all logical interface failover groups on a two node cluster.
76
Description
The network interface lif-weights show command displays the weights assigned to each LIF in a
DNS load-balancing zone in a Vserver.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
77
Description
The network interface service show command displays available services for IP LIFs and the TCP or
UDP ports that each service listens on. The ports listed in this table correspond to well-known ports that each
service can be expected to open a listening socket. Services that do not listen for ingress connections are
presented with an empty port list.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>,… parameter, the command displays only the fields that you
specify.
| [-restrictions ]
The network interface service show-restrictions command displays available services for IP
LIFs and usage restrictions for each service. The restrictions determine which LIFs are permitted to use
each service and what restrictions the service implies for the LIFs that do use it.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
78
network interface service-policy add-service
Add an additional service entry to an existing service policy
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
Parameters
Examples
The following example shows the addition of a service to an existing service policy.
79
cluster1::> network interface service-policy show -vserver cluster1
Vserver Policy Service: Allowed Addresses
--------- --------------------------
----------------------------------------
cluster1
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
Description
The network interface service-policy clone command creates a new service policy that includes
the same services and allowed addresses as an existing policy. Once the new service policy has been created,
it can be modified as necessary without impacting the original policy.
80
Parameters
Examples
ipspace1
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
81
-policy custom1 -target-vserver ipspace1 -target-policy custom2
ipspace1
custom2 intercluster-core: 0.0.0.0/0
management-core: 0.0.0.0/0
management-ssh: 0.0.0.0/0
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
Description
The network interface service-policy create command creates a new service policy with a list of
included services. LIFs can reference this policy to control the list of services that they are able to transport on
their network. Services can represent applications accessed by a LIF as well as applications served by this
cluster.
82
Parameters
Examples
The following example shows the creation of a service policy with no initial services.
The following example shows the creation of a new service policy with a specified service list.
83
cluster1::> network interface service-policy create -vserver cluster1
-policy custom -services intercluster-core,management-ssh
Description
The network interface service-policy delete command deletes an existing service policy.
Parameters
Examples
84
cluster1::> network interface service-policy show -vserver cluster1
Vserver Policy Service: Allowed Addresses
--------- --------------------------
----------------------------------------
cluster1
custom intercluster-core: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
Description
85
impacted by the change.
Parameters
Examples
The following example shows the modification of a service on an existing service policy.
86
cluster1::> network interface service-policy show -vserver cluster1
Vserver Policy Service: Allowed Addresses
--------- --------------------------
----------------------------------------
cluster1
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
Description
87
Parameters
Examples
The following example shows the removal of a service from an existing service policy.
88
network interface service-policy rename
Rename an existing network service policy
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network interface service-policy rename command assigns a new name to an existing service
policy without disrupting the LIFs using the policy.
Parameters
Examples
89
cluster1::> network interface service-policy show -vserver cluster1
Vserver Policy Service: Allowed Addresses
--------- --------------------------
----------------------------------------
cluster1
custom intercluster-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-intercluster intercluster-core: 0.0.0.0/0
management-https: 0.0.0.0/0
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
90
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
Parameters
Examples
The following example shows the restoration of a service policy’s default settings.
91
cluster1::> network interface service-policy show -vserver cluster1
Vserver Policy Service: Allowed Addresses
--------- --------------------------
----------------------------------------
cluster1
default-intercluster intercluster-core: 10.1.0.0/16
management-ssh: 10.1.0.0/16
management-https: 10.1.0.0/16
default-management management-core: 0.0.0.0/0
management-autosupport: 0.0.0.0/0
management-ssh: 0.0.0.0/0
management-https: 0.0.0.0/0
default-route-announce management-bgp: 0.0.0.0/0
Description
The network interface service-policy show command displays existing service policies.
92
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>,… parameter, the command displays only the fields that you
specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
93
Availability: This command is available to cluster administrators at the admin privilege level.
Description
IPspaces are distinct IP address spaces in which Storage Virtual Machines (SVMs) reside. The "Cluster"
IPspace and "Default" IPspace are created by default. You can create more custom IPspaces when you need
your SVMs to have overlapping IP addresses, or you need more control over networking configurations for
cluster peering. Please reference the "Network Management Guide" for the limit of how many custom IPspaces
are supported on your system..
Parameters
• The name must contain only the following characters: A-Z, a-z, 0-9, ".", "-" or "_".
• The first character of each label, delimited by ".", must be one of the following characters: A-Z or a-z.
• The last character of each label, delimited by ".", must be one of the following characters: A-Z, a-z or 0-
9.
• The maximum supported length is 47 characters.
• The system reserves the following names: "all", "local" and "localhost".
• The system provides the following IPspaces: "Cluster" and "Default".
Examples
Description
Parameters
Examples
94
cluster1::> network ipspace delete -ipspace ips1
Description
Rename an IPspace.
Parameters
• The name must contain only the following characters: A-Z, a-z, 0-9, ".", "-" or "_".
• The first character of each label, delimited by ".", must be one of the following characters: A-Z or a-z.
• The last character of each label, delimited by ".", must be one of the following characters: A-Z, a-z or 0-
9.
• The maximum supported length is 47 characters.
• The system reserves the following names: "all", "cluster", "local" and "localhost".
Examples
Description
Parameters
95
{ [-fields <fieldname>,…]
Specify the fields to be displayed for each IPspace.
| [-instance ] }
Display all parameters of the IPspace objects.
Examples
Description
The network ndp default-router delete-all command deletes default router lists from the specified
IPspace.
96
Parameters
Examples
Description
The network ndp default-router show command displays Neighbor Discovery Protocol (NDP) default
routers learned on a specified port.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
97
[-expire-time {[<integer>d][<integer>h][<integer>m][<integer>s]|never|expired}] -
Expire Time
Displays the default routers that have the specified expire time.
Examples
The following example displays NDP default routers on local port e0f.
Node: node1
IPspace: Default
Port Router Address Flag Expire Time
-------- -------------------------- -------------- --------------
e0f fe80::5:73ff:fea0:107 none 0d0h23m9s
Description
The network ndp neighbor create command creates a static Neighbor Discovery Protocol (NDP)
neighbor entry within a Vserver.
Parameters
Examples
The following example creates a NDP neighbor entry within Vserver vs0.
98
network ndp neighbor delete
Delete a static NDP neighbor entry
Availability: This command is available to cluster and Vserver administrators at the advanced privilege level.
Description
The network ndp neighbor delete command deletes a static Neighbor Discovery Protocol (NDP)
neighbor from a Vserver.
Parameters
Examples
The following example deletes a NDP neighbor entry within Vserver vs0.
Description
The network ndp neighbor show command displays a group of static Neighbor Discovery Protocol (NDP)
neighbors within one or more Vservers. You can view static NDP neighbors within specified Vservers,
neighbors with specified IPv6 address, and neighbors with specified MAC address.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
99
[-neighbor <IP Address>] - Neighbor Address
Displays the static NDP neighbors that have the specified IPv6 address.
Examples
The following example displays all of the static NDP neighbors configured on Vserver vs0.
Description
The network ndp neigbhor active-entry delete command deletes a Network Discovery Protocol
(NDP) neighbor entry on the specified port from a given Vserver’s subnet group.
Parameters
100
Examples
The following example deletes a neighbor entry from the Admin Vserver cluster1:
Description
The network ndp neighbor active-entry show command displays Network Discovery Protocol (NDP)
neighbor cache entries on one or more nodes. You can view ndp neighbors within specified nodes and within
specified System or Admin Vservers.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-verbose ]
Displays the expire time, state, is-router, and probe count fields.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
101
[-mac-address <MAC Address>] - MAC Address
Displays the NDP neighbors have the specified MAC address.
[-expire-time {[<integer>d][<integer>h][<integer>m][<integer>s]|never|expired}] -
Expire Time
Displays the NDP neighbors have the specified expire time.
Examples
The following example displays NDP neighbors on the Admin Vserver cluster1:
Node: node1
Vserver: cluster1
Subnet Group: ::/0
Neighbor MAC Address Port
------------------------------ -------------------- --------
fe80:4::5:73ff:fea0:107 00:05:73:a0:01:07 e0d
fe80:4::226:98ff:fe0c:b6c1 00:26:98:0c:b6:c1 e0d
fe80:4::4255:39ff:fe25:27c1 40:55:39:25:27:c1 e0d
3 entries were displayed.
Description
The network ndp prefix delete-all command deletes all prefixes learned from the specified IPspace.
102
Parameters
Examples
The following example deletes all IPv6 prefixes within IPspace ips1.
Description
The network ndp prefix show command displays IPv6 prefixes on one or more nodes.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-verbose ]
Displays the valid-lifetime, preferred-lifetime, origin and advertising-router fields.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
103
[-valid-lifetime {<unsigned integer>|infinity}] - Valid Lifetime
Displays the IPv6 prefixes having the specified valid lifetime in seconds.
[-expire-time {[<integer>d][<integer>h][<integer>m][<integer>s]|never|expired}] -
Expire Time
Displays the IPv6 prefixes having the specified expire time.
Examples
Node: node1
IPspace: Default
Port Prefix Flag Expire Time
--------- ------------------------- ------------------ -------------
e0f fd20:8b1e:b255:814e::/64 on-link-autonomous 29d23h56m48s
Description
This command enables or disables cluster health notifications on the specified node.
Parameters
104
[-enabled {true|false}] - Cluster Health Notifications Enabled
Setting this parameter to true enables cluster health notification. Setting it to false disables cluster health
notification.
Examples
The following example modifies the cluster health notification status for a node:
Description
The network options cluster-health-notifications show command displays whether the node’s
cluster health notifications are enabled.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example displays the cluster health notification status for a node:
105
network options detect-switchless-cluster modify
Modify the status of switchless cluster detection
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
This command enables or disables the automatic detection of a switchless cluster. A switchless cluster
consists of two nodes where the cluster ports are directly connected without a switch between them.
Parameters
Examples
Description
The network options detect-switchless-cluster show command displays whether switchless cluster detection is
enabled.
Examples
106
Description
This command sets the state of IPv6 options for the cluster.
Parameters
Examples
The following example enables IPv6 Router Advertisement processing for the
cluster:
cluster1::> network options ipv6 modify -is-ra-processing-enabled true
Description
This command displays the current state of IPv6 options for the cluster.
Examples
107
network options load-balancing modify
Modify load balancing algorithm
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
This command sets the state of geometric mean algorithm for load balancing
Parameters
Examples
The following example will enable the geometric mean algorithm for load
balancing.
cluster1::> network options load-balancing modify -enable true
The following example will disable the geometric mean algorithm for load
balancing.
cluster1::> network options load-balancing modify -enable false
Description
This command displays the use of geometric mean load balancing algorithm.
Examples
108
Description
The network options multipath-routing modify command is used to modify cluster-wide multipath
routing configuration.
Parameters
Examples
Description
The network options multipath-routing show command displays the multipath routing configuration
for the cluster.
Examples
Description
This command disables the given port health monitors for the given IPspaces in the cluster.
Parameters
109
The port health monitors to disable.
Examples
The following example disables the "l2_reachability" health monitor for the "Default" IPspace.
Description
This command enables the given port health monitors for the given IPspaces in the cluster.
Parameters
110
"unpromoted" state. While in this state, the monitor does not mark any ports as unhealthy due to the
l2_reachability health check. The monitor is promoted in the "Cluster" IPspace when the "Cluster" broadcast
domain is found to have passed the l2_reachability health check. An EMS event called
"vifmgr.hm.promoted" event is generated when the health monitor is promoted for the IPspace.
Examples
The following example enables the "l2_reachability" health monitor for the "Default" IPspace:
Description
This command modifies the enabled port health monitors for the given IPspaces in the cluster.
Parameters
111
[-health-monitors {l2-reachability|link-flapping|crc-errors|vswitch-link}] - List of
Enabled Port Health Monitors
All of the port health monitors that you want to enable. This command enables any port health monitors in
this list that are currently disabled, and it disables any currently enabled monitors that are not in this list.
Upon enabling the l2_reachability health monitor, it runs in an "unpromoted" state. While in this state,
the monitor does not mark any ports as unhealthy due to the l2_reachability health check. The monitor is
promoted in the "Cluster" IPspace when the "Cluster" broadcast domain is found to have passed the
l2_reachability health check. An EMS event called "vifmgr.hm.promoted" event is generated when the
health monitor is promoted for the IPspace.
Examples
The following example modifies the port health monitor configuration of the "Default" IPspace such that only
the "link_flapping" port health monitor is enabled. enabled for all IPspaces in the cluster.
Only the specified monitor is enabled after the modify command is issued.
112
Description
This command displays the enabled port health monitors for the IPspaces in the cluster.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example lists all port health monitors that are enabled for all IPspaces in the cluster.
Description
This command sets the status of sending statement of authority record in the DNS response.
Parameters
113
response for the cluster.
Examples
Description
This command displays whether sending the statement of authority record (SOA) in the DNS response is
enabled or not.
Examples
Description
This command sets whether the cluster network is in switchless or switched mode. A switchless cluster is
physically formed by connecting two nodes back-to-back, without a switch between them.
Parameters
114
Examples
Description
The network options switchless-cluster show command displays the attributes of a switchless cluster.
Examples
Description
The network port delete command deletes a network port that is no longer physically present on the
storage system.
Parameters
Examples
The following example deletes port e0c from a node named node0. The command works only when the port
does not physically exist on the storage system.
115
cluster1::*> network port delete -node node0 -port e0c
Description
The network port modify command enables you to change the maximum transmission unit (MTU) setting,
autonegotiation setting, administrative duplex mode, and administrative speed of a specified network port.
The MTU of ports that belong to broadcast-domains must be updated through the broadcast-domain
modify command.
Modification of a port’s IPspace will only work before a node is added to a cluster, when the cluster version is
below Data ONTAP 8.3, or when the node is offline. To change the IPspace of a port once the node is in a Data
ONTAP 8.3 cluster, the port should be added to a broadcast-domain that belongs to that IPspace.
Parameters
116
[-up-admin {true|false}] - Up Administrative
The administrative state of the port. If set to true , the port is used if it is operational. If set to false , the
port is configured down.
Examples
The following example modifies port e0a on a node named node0 not to use auto-negotiation, to preferably
use half duplex mode, and to preferably run at 100 Mbps.
Description
The network port show-address-filter-info command displays information about the port’s address
filter.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
117
[-num-total <integer>] - Total Number Of Entries
Use this parameter to specify the total number of entries.
Examples
The following example displays information of the given port’s address filter on the specified node of the
cluster.
Node: node1
Total Number Number of
Port of Address Used Address Used Address
Name Filter Entries Filter Entries Filter Entries
---- -------------- -------------- ------------------
e0c 1328 3 U 0 a0 98 40 e 6
M 1 80 c2 0 0 e
M 1 0 5e 0 0 fb
Description
The network port show command displays information about network ports. The command output
indicates any inactive links, and lists the reason for the inactive status.
Some parameters can have "administrative" and "operational" values. The administrative setting is the
preferred value for that parameter, which is set when the port is created or modified. The operational value is
the actual current value of that parameter. For example, if the network is underperforming due to network
problems, the operational speed value can be lower than the administrative setting.
If the operational duplex mode and speed of a port cannot be determined (for instance, if the link is down), that
port’s status is listed as undef , meaning undefined.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
118
| [-health ]
Use this parameter to display detailed health information for the specified network ports.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
119
[-up-admin {true|false}] - Up Administrative
Selects the network ports that match this parameter value.
[-health-degraded-reasons {l2-reachability|link-flapping|crc-errors|vswitch-
link}] - Port Health Degraded Reasons
Use this parameter to display information only about the ports that match the degraded-reason you specify.
120
[-vm-network-name <text>] - Virtual Machine Network Name
Use this parameter to display information only about the ports that match the network name you specify.
Google Cloud Platform only.
Examples
Node: node1
Ignore
Speed(Mbps) Health
Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status
Status
--------- ------------ ---------------- ---- ---- ----------- --------
------
e0a Cluster Cluster up 9000 auto/1000 healthy
false
e0b Cluster Cluster up 9000 auto/1000 healthy
false
e0c Default Default up 1500 auto/1000 degraded
false
e0d Default Default up 1500 auto/1000 degraded
true
Node: node2
Ignore
Speed(Mbps) Health
Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status
Status
--------- ------------ ---------------- ---- ---- ----------- --------
------
e0a Cluster Cluster up 9000 auto/1000 healthy
false
e0b Cluster Cluster up 9000 auto/1000 healthy
false
e0c Default Default up 1500 auto/1000 healthy
false
e0d Default Default up 1500 auto/1000 healthy
false
121
The following example displays health information about all network ports.
node2
e0a up healthy false -
e0b up healthy false -
e0c up healthy false -
e0d up degraded false -
Description
The IPSpace of the ports added will be updated to the IPSpace of the broadcast-domain. The
ports will be added to the failover-group of the broadcast-domain. The MTU of the ports will be
updated to the MTU of the broadcast-domain.
Parameters
122
Examples
The following example adds the port "e0d" on node "cluster1-1" and port "e0d" on node "cluster1-2" to
broadcast domain "mgmt" in IPspace "Default".
Description
The IPSpace of the ports added will be updated to the IPSpace of the broadcast-domain. A
failover-group will be generated containing the ports of the broadcast-domain. The MTU of all of
the ports in the broadcast-domain will be updated to the MTU specified for the broadcast-
domain.
Parameters
Examples
The following example creates broadcast domain "mgmt" in IPspace "Default" with an MTU of 1500 and
network ports e0c from node "gx1" and node "gx2".
123
network port broadcast-domain delete
Delete a layer 2 broadcast domain
Availability: This command is available to cluster administrators at the admin privilege level.
Description
Parameters
Examples
The following example deletes the broadcast domain "mgmt" in IPspace "Default".
Description
Parameters
Examples
The following example merges broadcast domain "bd-mgmt" in IPspace "Default" to broadcast domain "bd-
data".
124
cluster1::network port broadcast-domain> merge -ipspace Default -broadcast
-domain bd-mgmt -into-broadcast-domain bd-data
Description
Parameters
Examples
The following example modifies the mtu attribute of broadcast domain "mgmt" in IPspace "Default" to 1500
Description
Parameters
125
-broadcast-domain <Broadcast Domain> - Layer 2 Broadcast Domain
The broadcast domain of the ports.
Examples
The following example removes port "e0d" on node "cluster1-1" and port "e0d" on node "cluster1-2" from
broadcast domain "mgmt" in IPspace "Default".
Description
Parameters
Examples
The following example renames the broadcast domain named "mgmt" to "mgmt2" in IPspace "Default".
126
Description
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
[-port-update-status-combined {complete|in-progress|error|overridden-while-
offline}] - Combined Port Update Status
Selects the broadcast domains that contain the combined network port status. For example, specifying
"error" will display broadcast domains that contain a combined network port status of "Error".
127
Examples
Description
• If the ports are in a failover group, all ports in the failover group must be provided. Use network interface
failover-groups show to see which ports are in failover groups.
• If the ports have LIFs associated with them, the LIFs cannot be part of a subnet’s ranges and the LIF’s
curr-port and home-port must both be provided. Use network interface show-fields`subnet-
name , home-node , home-port , curr-node , curr-port to see which ports have
LIFs associated with them and whether the LIFs are part of a subnet’s ranges.
Use network subnet remove-ranges with the LIF’s IP address and `-force-update-
lif-associations set to true to remove the LIF’s association with a subnet.
Parameters
128
-ports [node>:<port],… - List of Ports
The ports to be split from this broadcast domain.
Examples
The following example splits port "e0d" on node "cluster1-1" and port "e0d" on node "cluster1-2" from
broadcast domain "bd-mgmt" in IPspace "Default" to broadcast domain "bd-data".
Related Links
Description
The network port ifgrp add-port command adds a network port to a port interface group. The port
interface group must already exist. You can create a port interface group by using the network port ifgrp create
command.
• A port that is already a member of a port interface group cannot be added to another port interface group.
• Cluster ports and management ports cannot be in a port interface group.
• A port to which a logical interface is already bound cannot be added to a port interface group.
• A port that already has an assigned failover role cannot be added to a port interface group.
• A VLAN port cannot be added to a port interface group.
• A port which attaches to a VLAN cannot be added to a port interface group.
• An interface group port cannot be added to a port interface group.
• A port that is assigned to a broadcast domain cannot be added to a port interface group.
• All ports in a port interface group must be physically located on the same node.
Parameters
129
-ifgrp <ifgrp name> - Interface Group Name
The port interface group to which a port is to be added.
Examples
The following example adds port e0c to port interface group a1a on a node named node1:
cluster1::> network port ifgrp add-port -node node1 -ifgrp a1a -port e0c
Related Links
Description
The network port ifgrp create command creates a port interface group. See the documentation for the
network port ifgrp add-port command for a list of restrictions on creating port interface groups.
Parameters
130
-mode {multimode|multimode_lacp|singlemode} - Create Policy
The create policy for the interface group that will be created. Valid values are:
• multimode - Bundle multiple member ports of the interface group to act as a single trunked port
• multimode_lacp - Bundle multiple member ports of the interface group using Link Aggregation Control
Protocol
• singlemode - Provide port redundancy using member ports of the interface group for failover
Examples
The following example creates a port interface group named a0a on node node0 with a distribution function of
ip:
cluster1::> network port ifgrp create -node node0 -ifgrp a0a -distr-func
ip -mode multimode
Related Links
Description
The network port ifgrp delete command destroys a port interface group.
When you delete an interface group port, it is automatically removed from failover rules and
groups to which it belongs.
Parameters
Examples
The following example deletes port interface group a0b from a node named node0.
131
network port ifgrp remove-port
Remove a port from an interface group
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network port ifgrp remove-port command removes a network port from a port interface group.
Parameters
Examples
The following example removes port e0d from port interface group a1a on a node named node1:
cluster1::> network port ifgrp remove-port -node node1 -ifgrp a1a -port
e0d
Description
The network port ifgrp show command displays information about port interface groups. By default, it
displays information about all port interface groups on all nodes in the cluster.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
132
[-node {<nodename>|local}] - Node
Selects the port interface groups that match this parameter value. Use this parameter with the -ifgrp
parameter to select information about a specific port interface group.
Examples
The following example displays information about all port interface groups.
133
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network port vip create command creates a VIP port in the specified IPspace on the specified
node. Only one VIP port can be created per IPspace on the given node.
Parameters
Examples
This example shows how to create a VIP port named v0a in ipspace ips on node1.
cluster1::> network port vip create -node node1 -port v0a -ipspace ips
Description
Parameters
Examples
134
network port vip show
Display VIP ports
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network port vip show command displays information about VIP ports.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The example below shows VIP port v0a is created in IPspace ips on node1.
Description
The network port vlan create command attaches a VLAN to a network port on a specified node.
135
Parameters
Examples
This example shows how to create VLAN e1c-80 attached to network port e1c on node1.
Description
The network port vlan delete command deletes a VLAN from a network port.
When you delete a VLAN port, it is automatically removed from all failover rules and groups that
use it.
Parameters
136
-vlan-id <integer> - Network Switch VLAN Identifier }
The ID tag of the deleted VLAN.
Examples
This example shows how to delete VLAN e1c-80 from network port e1c on node1.
Description
The network port vlan show command displays information about network ports that are attached to
VLANs. The command output indicates any inactive links and lists the reason for the inactive status.
If the operational duplex mode and speed cannot be determined (for instance, if the link is down), they are
listed as undef , meaning undefined.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
137
Examples
The example below shows VLAN e1b-70 attached to port e1b on node1.
Description
The network qos-marking modify command modifies the QoS marking values for different protocols, for
each IPspace.
Parameters
Examples
The following example modifies the QoS marking entry for the NFS protocol in the Default IPspace:
138
network qos-marking show
Display the QoS marking values
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network qos-marking show command displays the QoS marking values for different protocols, for
each IPspace.
Parameters
{ [-fields <fieldname>,…]
Use this parameter to display only certain fields of the QoS marking table.
| [-instance ] }
Use this parameter to display all the fields of the QoS marking table.
Examples
The following example displays the QoS marking entries for the Default IPspace.
139
cluster1::> network qos-marking show -ipspace Default
IPspace Protocol DSCP Enabled?
------------------- ----------------- ----- --------
Default
CIFS 10 false
FTP 48 false
HTTP-admin 48 false
HTTP-filesrv 10 false
NDMP 10 false
NFS 10 true
SNMP 48 false
SSH 48 false
SnapMirror 10 false
SnapMirror-Sync 10 false
Telnet 48 false
iSCSI 10 false
12 entries were displayed.
Description
The network route create command creates a static route within a Vserver.
Parameters
140
Examples
The following example creates default routes within Vserver vs0 for IPv4 and IPv6.
Description
The network route delete command deletes a static route from a Vserver.
Parameters
Examples
The following example deletes a route within Vserver vs0 for destination 0.0.0.0/0.
Description
The network route show-lifs command displays the association of static routes and Logical Interfaces
(LIFs) within one or more Vservers. You can view routes within specified Vservers, routes with specified
141
destinations, and routes with specified gateways.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Description
The network route show command displays a group of static routes within one or more Vservers. You can
view routes within specified Vservers, routes with specified destinations, and routes with specified gateways.
Parameters
{ [-fields <fieldname>,…]
Use this parameter to display only certain fields of the routing tables.
| [-instance ] }
Use this parameter to display all fields of the routing tables.
142
[-destination <IP Address/Mask>] - Destination/Mask
Use this parameter to display only routes that have the specified IP address and subnet mask as their
destination. The format for this value is: address, slash ("/"), mask. The example below has 0.0.0.0/0 as
a valid value for the -destination parameter.
Examples
Description
The network route active-entry show command displays installed routes on one or more nodes. You
can view routes within specified nodes, within specified Vservers, routes in specified subnet groups, and routes
with specified destinations.
143
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-verbose ]
Use this parameter to display the reference count, use, interface, and Path MTU fields.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
• U - Usable
144
• G - Gateway
• H - Host
• R - Reject
• D - Dynamic
• S - Static
• 1 - Protocol1
• 2 - Protocol2
• L - Llinfo
• C - Clone
Examples
The following example displays active routes on all nodes in Vserver vs0 with subnet-group 10.10.10.0/24.
Vserver: vs0
Node: node1
Subnet Group: 10.10.10.0/24
Destination Gateway Interface Metric Flags
---------------------- ------------------- --------- ------ -----
default 10.10.10.1 e0c 0 UGS
Vserver: vs0
Node: node2
Subnet Group: 10.10.10.0/24
Destination Gateway Interface Metric Flags
---------------------- ------------------- --------- ------ -----
default 10.10.10.1 e0c 0 UGS
2 entries were displayed.
145
network subnet commands
network subnet add-ranges
Add new address ranges to a subnet
Availability: This command is available to cluster administrators at the admin privilege level.
Description
All addresses in a range must be the same address family (IPv4 or IPv6) and must have the
same subnet mask. Ranges that overlap or are next to existing ranges will be merged with the
existing ranges.
Parameters
Examples
Description
146
Parameters
Examples
Description
147
Parameters
Examples
Description
Modify a subnet.
Parameters
148
network interfaces are using IP addresses in the IP ranges being removed. Using this parameter will
associate the interfaces with the IP addresses in the ranges being added to the subnet. It will also remove
the subnet’s association with the interfaces with IP addresses in the IP ranges being removed and will allow
the command to succeed.
Examples
Description
Parameters
Examples
The following example removes an address range with starting address of 10.98.1.1 from subnet s1 in
IPspace Default .
149
network subnet rename
Rename a layer 3 subnet
Availability: This command is available to cluster administrators at the admin privilege level.
Description
Rename a Subnet.
Parameters
Examples
Description
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
150
[-subnet-name <subnet name>] - Subnet Name
Selects the subnets that match the given subnet name.
Examples
151
network tcpdump commands
network tcpdump show
Show running tcpdump instances
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The network tcpdump show command shows currently running packet traces (via tcpdump) on a matching
node.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example shows the details of running packet traces on nodes "node1" and "node2":
152
Description
The network tcpdump start command starts packet tracing (via tcpdump) with the given parameters.
Parameters
Examples
The following example starts packet tracing on node "node1" with address "10.98.16.164", network interface
"e0c", buffer size "10 KB", and protocol port number "10000":
Description
The network tcpdump stop command stops a running packet trace (via tcpdump) on a given network
interface. The trace files could be located in /mroot/etc/log/packet_traces/.
153
Parameters
Examples
The following example stops a packet trace on network interface "e0a" from node "node1":
Description
The network tcpdump trace delete command deletes the tcpdump trace file from a matching node.
Parameters
Examples
The following example deletes the list of tcpdump trace files from node "node1" using wildcard pattern:
Description
The network tcpdump trace show command shows the list of tcpdump trace files. The trace files could
be located in /mroot/etc/log/packet_traces/.
154
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example shows the list of trace files on nodes "node1" and "node2":
Description
The network test-link run-test command runs a performance test between two nodes. The command
requires a source node, Vserver, and destination address.
Before executing the network test-link run-test command, the network test-link start-server
command must be run to start a server on the node hosting the destination LIF. After all tests to that node are
complete the network test-link stop-server command must be run to stop the server.
The test results are stored non-persistently and can be viewed using the network test-link show command.
Results include input parameters, the bandwidth achieved, and the date and time of the test.
155
Parameters
Examples
The following example runs a test between the cluster LIFs, including the start and stop of the server side of
the test:
Related Links
156
Availability: This command is available to cluster administrators at the advanced privilege level.
Description
The network test-link show command displays the results of prior network test-link run-test commands.
The test results are stored non-persistently and can be viewed using the network test-link show
command. Results include input parameters, the bandwidth achieved, and the date and time of the test.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
If you specify the -instance parameter, the command displays detailed information about all fields.
Examples
The following example runs a test between the cluster LIFs twice and then demonstrates the show command
results:
157
cluster1::*> network test-link run-test -node node2 -vserver Cluster
-destination 172.31.112.173
Node: node2
Vserver: Cluster
Destination: 172.31.112.173
Time of Test: 4/25/2016 10:37:52
MB/s: 29.9946
cluster1::*> network test-link run-test -node node2 -vserver Cluster
-destination 172.31.112.173
Node: node2
Vserver: Cluster
Destination: 172.31.112.173
Time of Test: 4/25/2016 10:38:32
MB/s: 39.8192
cluster1::network test-link*> show
Node Vserver Destination Time of Test
MB/s
----------------- ----------------- ---------------
------------------- ------------
node2 Cluster 172.31.112.173 4/25/2016
10:38:32 39.8192
Related Links
Description
The network test-link start-server command starts the server side of the network test-link
test on the designated node.
Only one server at a time can be running for the network test-link command on a given node. If the
network test-link start-server command is issued and a server is already running on the node, then
the command is ignored, and the existing server continues to run.
Parameters
158
Examples
Description
The network test-link stop-server command stops the network test-link server running on the
designated node.
Parameters
Examples
Description
This command displays options which can be used to fine tune icmp protocol behavior.
Parameters
159
[-is-drop-redirect-enabled {true|false}] - Drop redirect ICMP
Sets this parameter to drop redirect ICMP message.
Examples
Description
This command displays the current state of the ICMP tuning options for the given node.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
Displays all ICMP tuning options.
160
Examples
Description
This command displays options which can be used to fine tune icmpv6 protocol behavior.
Parameters
Examples
Description
This command displays the current state of the ICMPv6 tuning options for the given node.
161
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
Displays all ICMPv6 tuning options.
Examples
Description
Parameters
162
[-max-cwnd-increment <integer>] - Maximum congestion window segments incrementation
Sets the maximum congestion window increment segements during slow start.
Examples
Description
This command displays the current state of the TCP tuning options for the given node.
Parameters
{ [-fields <fieldname>,…]
If you specify the -fields <fieldname>, … parameter, the command output also includes the specified
field or fields. You can use '-fields ?' to display the fields to specify.
| [-instance ] }
Displays all TCP tuning options.
163
[-is-sack-enabled {true|false}] - SACK supoort enabled
Displays all entries that match the "is-sack-enabled" value.
Examples
164
Copyright information
Copyright © 2022 NetApp, Inc. All Rights Reserved. Printed in the U.S. No part of this document covered by
copyright may be reproduced in any form or by any means—graphic, electronic, or mechanical, including
photocopying, recording, taping, or storage in an electronic retrieval system—without prior written permission
of the copyright owner.
Software derived from copyrighted NetApp material is subject to the following license and disclaimer:
THIS SOFTWARE IS PROVIDED BY NETAPP “AS IS” AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE, WHICH ARE HEREBY DISCLAIMED. IN NO EVENT SHALL
NETAPP BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
NetApp reserves the right to change any products described herein at any time, and without notice. NetApp
assumes no responsibility or liability arising from the use of products described herein, except as expressly
agreed to in writing by NetApp. The use or purchase of this product does not convey a license under any
patent rights, trademark rights, or any other intellectual property rights of NetApp.
The product described in this manual may be protected by one or more U.S. patents, foreign patents, or
pending applications.
LIMITED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set
forth in subparagraph (b)(3) of the Rights in Technical Data -Noncommercial Items at DFARS 252.227-7013
(FEB 2014) and FAR 52.227-19 (DEC 2007).
Data contained herein pertains to a commercial product and/or commercial service (as defined in FAR 2.101)
and is proprietary to NetApp, Inc. All NetApp technical data and computer software provided under this
Agreement is commercial in nature and developed solely at private expense. The U.S. Government has a non-
exclusive, non-transferrable, nonsublicensable, worldwide, limited irrevocable license to use the Data only in
connection with and in support of the U.S. Government contract under which the Data was delivered. Except
as provided herein, the Data may not be used, disclosed, reproduced, modified, performed, or displayed
without the prior written approval of NetApp, Inc. United States Government license rights for the Department
of Defense are limited to those rights identified in DFARS clause 252.227-7015(b) (FEB 2014).
Trademark information
NETAPP, the NETAPP logo, and the marks listed at http://www.netapp.com/TM are trademarks of NetApp, Inc.
Other company and product names may be trademarks of their respective owners.
165