Table of ContentsView in Frames

Enabling or disabling export policies for SMB access

You can enable or disable export policies for SMB access on Vservers with FlexVol volumes and Vservers with Infinite Volumes. Using export policies to control SMB access to resources is optional for Data ONTAP 8.2 and later.

About this task

Starting with Data ONTAP 8.2, a new option controls whether export policies are enabled for SMB access. When setting up a new CIFS server on your Vserver, the usage of export policies for SMB access is disabled by default. You can enable export policies for SMB access if you want to control access based on authentication protocol or on client IP addresses or host names. You can enable or disable export policies for SMB access at any time.

When upgrading a cluster from versions of Data ONTAP earlier than 8.2, this option is automatically enabled on CIFS servers in the cluster that are using export policies to control SMB access. There is no unexpected change to configured access controls when you upgrade to a version of Data ONTAP where export policies for SMB access is optional.

Steps

  1. Set the privilege level to advanced:
    set -privilege advanced
  2. Perform one of the following actions:
    If you want export policies to be... Enter the command...
    Enabled
    vserver cifs options modify -vserver vserver_name -is-exportpolicy-enabled true
    Disabled
    vserver cifs options modify -vserver vserver_name -is-exportpolicy-enabled false
  3. Return to the admin privilege level:
    set -privilege admin

Example

The following example enables the usage of export policies to control SMB client access to resources on Vserver vs1:

cluster1::> set -privilege advanced
Warning: These advanced commands are potentially dangerous; use them
only when directed to do so by technical support personnel.
Do you wish to continue? (y or n): y 

cluster1::*> vserver cifs options modify -vserver vs1 -is-exportpolicy-enabled true

cluster1::*> set -privilege admin