SnapMirror and SnapVault PUSH or PULL ?

SnapMirror and SnapVault

SnapMirror and SnapVault use TCP port 10566 for data transfer. Network connections are always initiated by the destination system; that is, SnapMirror and SnapVault pull data rather than push data.

Authentication is minimal with both SnapMirror and SnapVault. To restrict inbound TCP connections on port 10566 to a list of authorized hosts or IP addresses, you should configure the snapmirror.access or snapvault.access option. When a connection is established, the destination storage system communicates its host name to the source storage system, which then uses this host name to determine if a transfer is allowed. You should confirm a match between the host name and its IP address. To confirm that the host name and the IP address match, you should set the snapmirror.checkip.enable option to on.
To disable SnapMirror, you should set the snapmirror.enable option to off. To disable SnapVault, you should set the snapvault.enable option to off.