ONTAP Discussions

Snapmirror with encryption

kahad

Hello,

Does anybody knows if we can setup a Snapmirror replication from a non-encrypted source volume to an NVE destination volume, running DO 9.3 ?

 

And also, what are the requirement to establish an end to end data encryption using NVE and Snapmirror  between two separated Netapp Cluster.

 

Thanks !

1 ACCEPTED SOLUTION

scottharney

Right. NVE provides at-rest encryption only for the source and/or destination array locally.  NVE is independent of snapmirro and thus can be unconfigured at the source and configured at the destination and vice-versa. For in-flight encryption of snapmirror transfers you would need to configure ipsec as described in this KB article https://kb.netapp.com/app/answers/answer_view/a_id/1032413/loc/en_US#__highlight

View solution in original post

3 REPLIES 3

SpindleNinja

What's the souce cluster version,  but usually you can do non-NVE on oneside and NVE on the other.   

 

And I don't believe there is any feature yet built in to ONTAP for encrypting NVE snapmirrors in-flight. 

kahad

DO 9.3 is running on both cluster.

This means we can establish a snapmirror replication from a non NVE source cluster to a NVE destination cluster, without in flight encryption, right ?

scottharney

Right. NVE provides at-rest encryption only for the source and/or destination array locally.  NVE is independent of snapmirro and thus can be unconfigured at the source and configured at the destination and vice-versa. For in-flight encryption of snapmirror transfers you would need to configure ipsec as described in this KB article https://kb.netapp.com/app/answers/answer_view/a_id/1032413/loc/en_US#__highlight

View solution in original post

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public