Table of ContentsView in Frames

Creating a vFiler unit in a nondefault IPspace

If you are a Storage Service Provider (SSP), you might have different clients that require complete network isolation. Creating vFiler units in separate, or nondefault IPspaces ensures that the data on these vFiler units is not routed to other vFiler units or the hosting storage system in other IPspaces.

Before you begin

Steps

  1. Assign an interface to be used by the vFiler unit to the newly created IPspace by entering the following command:
    ipspace assign ipspacename interface_name

    ipspacename is the newly created IPspace.

  2. Create the vFiler unit by entering the following command:
    vfiler create vfiler_name -n -s ipspace -i ip_address [ -i ip_address ] ... path [ path ] ...

    ipspace is the IPspace in which the vFiler unit's IP addresses reside.

    ip_address is an IP address.

    path is the complete path name to an existing volume or qtree.

    The first path name is the storage unit that contains the /etc directory, which contains the configuration information about the vFiler unit.

    Note: You must use the -n option of the vfiler create command to specify IP addresses for interfaces assigned to different IPspaces. The setup command (which runs automatically after the vfiler create command unless you use the -n option) does not allow duplicate IP addresses even if they are for interfaces in the same IPspace.

    Example

    The following command shows how to create a vFiler unit named vFiler1 in the IPspace named ipspace1, using the IP address 123.123.123.123 and the /vol/vol1 volume as resources:

    vfiler create vFiler1 -n -s ipspace1 -i 123.123.123.123 /vol/vol1

  3. Depending on the type of IP address, perform the appropriate action:
    If you want to create... Enter the following command…
    An alias IP address
    ifconfig interface alias address up
    A primary IP address
    ifconfig interface address
    Note: When you run the ifconfig interface address command, the existing primary IP address is replaced with the new IP address.

    Each interface can have one IP and one IPv6 primary address. You can add or delete additional addresses (aliases) after the primary IP address is created. You cannot delete the primary IP address if any aliases exist, but you can modify it to change the address.

  4. Modify the routing table for the vFiler unit by entering the following command:
    vfiler run vfiler_name route add [inet] default gateway_metric
    vfiler run vfiler_name route add [inet6] default gateway_metric

    Example

    The following example shows how to add a route to the routing table used by the vFiler unit named vFiler1:

    vfiler run vFiler1 route add default 1.2.3.4 1

  5. For each interface used by the vFiler unit, add the following information to the /etc/rc file on the hosting storage system:

    • The same ifconfig command that was used to configure the interface as Up.
    • The same route command that was used to add a route to the routing table.

    This configures the interfaces as Up and enforces the route commands across reboots.

  6. Optional: If the hosting storage system is part of an HA pair, edit the /etc/rc file in each partner of the HA pair to define a partner interface for each interface that the vFiler unit uses.

    Example

    The following command shows how to ensure that interface e10 has a partner e10 interface: ifconfig e10 partner e10

    Alternatively, you can run the setup command from the storage system and enter the partner interface for each interface.

    Attention: If you use the storage system setup command to automatically define a partner interface, it clears all existing information about vFiler unit configuration in /etc/rc file.

  7. Optional: Optional: If the IPspace does not have a default gateway, establish a route to the default gateway in the IPspace that any vFiler in the IPspace can use by entering the following command:
    vfiler run vfiler_name route add default gateway_metric

    Example

    The following command shows how to add a route to the default gateway for the IPspace used by the vFiler unit named vFiler1:

    vfiler run vFiler1 route add default 1.2.3.1 1
    vfiler run vFiler1 route add inet6 default fc20::abcd 1