NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

Active IQ Unified Manager Discussions

Accessing SVM API on L3 interface

Martin1
1,900 Views

I need to provide API access to one of our Netapp clusters, but I need to limit this to a single SVM.

 

I have created a SVM (on OnTap 9.7p7) with management htts service enabled and I'm able to access this over API from a server in the same subnet (using simple curl get/post/etc commands). So this works like a charm.

 

I then created a new SVM on a new cluster (still ontap 9.7p7), with the same settings, but now I'm trying to access the SVM on a routed interface. When I now try to access the SVM API, I end up on the custer (or admin SVM) instead of the data SVM I try to access! The data SVM is on a seperate vlan and with tcpdump on this vlan I can see the traffic. When I, as an example, run a "curl get ...  storage/volumes/...", my credentials does not work. I do not see any entries of this in the data SVM audit log, but if I check the admin SVM audit log I can see my failed login attempts. I then tried with credentials defined on the cluster and boom; I get a list of all volumes on the cluster. How can this be? Why am I not able to access the data SVM and why am I ending up on the cluster?

 

0 REPLIES 0
Public