When you disallow protocols on a vFiler unit, it has certain effects, depending on the protocol that is disabled. For example, if you disable HTTP or FTP, no new FTP or HTTP connections are allowed on the vFiler unit.
Effects of disallowing iSCSI: After iSCSI is disallowed on a vFiler unit, the following conditions apply on that vFiler unit
- You cannot start iSCSI.
- No new iSCSI sessions are allowed.
- iSCSI commands on existing sessions are rejected.
Effects of disallowing FTP: After FTP is disallowed on a vFiler unit, no new FTP connections are allowed on the vFiler unit. However, transfers that started before FTP was disallowed are completed.
Effects of disallowing HTTP: After HTTP is disallowed on a vFiler unit, no new HTTP connections are allowed on the vFiler unit. Each new request receives a 503 HTTP server is disabled message. Any existing connections remain active.
Disallowing RSH and SSH: Although the Data ONTAP rsh.enable
option values (On or Off) determine whether the RSH or SSH server is enabled or disabled on a storage system
, disallowing RSH or SSH on a vFiler unit
is independent of the value for that option. A vFiler unit
can be configured to restrict RSH or SSH even when the corresponding enable
option is set to On.
Note: To allow RSH on a vFiler unit, you must have the rsh.enable option set to On. To allow SSH on a vFiler unit, you must have the ssh.enable option set to On.