nerdexam
Network_Appliance

NS0-157 · Question #30

A user is reporting trouble using a SVM management LIF. You have verified host configuration, network connectivity, and that the LIF responds to pings. What should you do to continue troubleshooting…

The correct answer is D. Ensure the SVM management LIF's firewall policy is set to management. When a SVM management LIF responds to pings but remains unusable, the firewall policy is likely blocking management protocols on the LIF.

Performance, Troubleshooting, and Security

Question

A user is reporting trouble using a SVM management LIF. You have verified host configuration, network connectivity, and that the LIF responds to pings. What should you do to continue troubleshooting this problem?

Options

  • AEnsure the SVM management LIF's failover policy is correct.
  • BEnsure the SVM management LIF's administrative status is up.
  • CEnsure the SVM management LIF is on its home port.
  • DEnsure the SVM management LIF's firewall policy is set to management.

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    16% (5)
  • D
    74% (23)

Why each option

When a SVM management LIF responds to pings but remains unusable, the firewall policy is likely blocking management protocols on the LIF.

AEnsure the SVM management LIF's failover policy is correct.

Failover policy governs where the LIF migrates during a port failure event and has no effect on whether management traffic is permitted through a currently reachable LIF.

BEnsure the SVM management LIF's administrative status is up.

If the administrative status were down, the LIF would not respond to pings at all, which the question confirms it already does.

CEnsure the SVM management LIF is on its home port.

A LIF that has migrated off its home port continues to pass traffic normally; this condition affects failover behavior, not service availability on a reachable LIF.

DEnsure the SVM management LIF's firewall policy is set to management.Correct

The firewall policy on a LIF controls which services and protocols are permitted to reach that LIF. If the policy is not set to 'management', protocols required for management access such as SSH, HTTPS, and SNMP are blocked even though the LIF is administratively up and reachable via ICMP ping.

Concept tested: ONTAP SVM management LIF firewall policy configuration

Source: https://docs.netapp.com/us-en/ontap/networking/configure_firewall_policies_for_lifs.html

Topics

#SVM management LIF#firewall policy#troubleshooting#LIF connectivity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NS0-157 Practice