You can enable or disable export policies for SMB access on Vservers with FlexVol volumes and Vservers with Infinite Volumes. Using export policies to control SMB access to resources is optional for Data ONTAP 8.2 and later.
Starting with Data ONTAP 8.2, a new option controls whether export policies are enabled for SMB access. When setting up a new CIFS server on your Vserver, the usage of export policies for SMB access is disabled by default. You can enable export policies for SMB access if you want to control access based on authentication protocol or on client IP addresses or host names. You can enable or disable export policies for SMB access at any time.
When upgrading a cluster from versions of Data ONTAP earlier than 8.2, this option is automatically enabled on CIFS servers in the cluster that are using export policies to control SMB access. There is no unexpected change to configured access controls when you upgrade to a version of Data ONTAP where export policies for SMB access is optional.
|If you want export policies to be...||Enter the command...|
vserver cifs options modify -vserver vserver_name -is-exportpolicy-enabled true
vserver cifs options modify -vserver vserver_name -is-exportpolicy-enabled false
The following example enables the usage of export policies to control SMB client access to resources on Vserver vs1:
cluster1::> set -privilege advanced Warning: These advanced commands are potentially dangerous; use them only when directed to do so by technical support personnel. Do you wish to continue? (y or n): y cluster1::*> vserver cifs options modify -vserver vs1 -is-exportpolicy-enabled true cluster1::*> set -privilege admin