An administrator is designing a FlexPod solution with NetApp ONTAP 9.7 software with a logical separation of data for each department. In this…

In ONTAP, secure multi-tenancy is provided by Storage Virtual Machines (SVMs).

Each SVM owns its own logical interfaces, volumes, and policies, giving every department an isolated administrative and data domain.

If departments require complete network isolation or use overlapping IP subnets, each SVM is placed in its own IPspace.

Therefore, IPspaces and SVMs are the two ONTAP constructs that must be included in a design whose goal is logical (tenant-level) separation of departmental data.

B. Volumes – They store data inside an SVM but do not by themselves deliver tenant-level isolation or separate administrative domains.

C. Virtual port channels – Cisco vPCs aggregate uplinks on the network side; they have no role in ONTAP data-tenant separation.

1. NetApp, “ONTAP 9.7 Logical Multi-Tenancy Guide,” sec. 2.1-2.2: “SVMs provide secure, logical segregation… An IPspace defines a distinct IP address space … enabling overlapping IP ranges.”

2. NetApp, ONTAP 9.7 Network Management Guide, chap. “Using IPspaces for network isolation,” p. 49-54.

3. Cisco & NetApp, “FlexPod Datacenter with NetApp ONTAP 9.7 – Cisco Validated Design,” v1.0, section “Multi-Tenancy with SVMs and IPspaces,” p. 58-60.

4. NetApp, “ONTAP 9.7 System Administration Reference,” Table 9-3: “Relationship of IPspaces, SVMs, and volumes in multi-tenant environments.”