Share same Vlan in multiple SVMs

[Uzzo]

Hello , 

I'd like to share the same vlan in multiple SVMs for AV setup ( create additional LIF in each Vlan ) 

Actually ALL SMVs are in the same domain , but each SVM as their proper VLAN ,ipspace and broadcast-domain for data traffic . 

[TMACMD]

The only way that is ever going to happen (the same VLAN in different IPSPACES) is if you dedicate different interfaces for different SVMs. Like e0g-120 for svm1 and e0h-120 for svm2

In your setup, IPspaces are not really giving you any benefit.

If all the networking is the same, they should all be in the same broadcast-domain and IPspace.

[cruxrealm]

Are you setting up ONTAP AV scanners?

[Uzzo]

Yes . i need to create a LIF for dedicated AV vlan

[TMACMD]

So create a new vlan and put that vlan on each node that in an ipspace 

[Uzzo]

VLAN exists .. i need 1 LIF with an IP on this VLAN , and for each SVM ( have multiple SVMs ) .

Problem is that  there is a dedicated Ipspace/bd  per SVMs ...

[Uzzo]

example : 

SVM1 :: Ipspace1 / bd1 ==> IP 10.10.10.1 ( vlan 123 )

SVM2 :: Ipspace2 / bd2 ==> IP 10.10.10.2 ( vlan 123 )

SVM3 :: Ipspace3 / bd3 ==> IP 10.10.10.3 ( vlan 123 ) 

[Uzzo]

i know that  SVM needs all its LIFs in the same IPSpace ... this is my blocking point .

i want to avoid to change ipspace/bd on all the SVMs ... there will be downtime 

[TMACMD]

You cannot possibly have all the SVM workings with that IP range right now.

Are you saying you want or need to change the IP addresses to be in the same broadcast domain/ipspace?

As I said before, if you really really must do this, you could dedicate a physical interface to each SVM (like e0g) and create the vlan

SVM1 e0e-123

SVM2 e0f-123

SVM3 e0g-123

You can maintain your IPSPACEs but group into different broadcast-domains/ipspaces

broadcast-domain create -ipspace ips1 -broadcast-domain bd1-123 -mtu 9000 -ports node-01:e0e-123,node-02:e0e-123

broadcast-domain create -ipspace ips3 -broadcast-domain bd2-123 -mtu 9000 -ports node-01:e0f-123,node-02:e0f123

broadcast-domain create -ipspace ips3 -broadcast-domain bd3-123 -mtu 9000 -ports node-01:e0g-123,node-02:e0g123

If you want/need them in the same IPspace, there is another option with a small amount of downtime.

Volume Rehost

You can leave the volume online, but unmount from the current location. Then rehost it. something like

vol unmount -vserver SVM3 -volume vol3_1

vol rehost -vserver SVM3 -volume vol3_1 -destination SVM1

(wait for it to finish)

vol mount -vserver SVM1 -volume vol3_1 /vol3_1

You will need to update export-policy rules and/or CIFS shares.

https://docs.netapp.com/us-en/ontap/networking/configure_ipspaces_cluster_administrators_only_overview.html#example-of-using-ipspaces

Bottom line, that it is not possible to merge different ipspaces together. It essentially violates the entire purpose of ipspaces.

something else that might work from the switch is "vlan mapping". I am not going to go into much detail. You may be able to create a new vlan for each SVM/ipspace and maybe have the switch map that new vlan (say vlan 456) to vlan 123. (Note: if you ask about this I will not provide more details. I think it might be possbile, I have never done it I just know the capability exists on some switches)