topic Re: Export policy in ONTAP Discussions

Export policy

SVHO — Wed, 04 Jun 2025 14:23:43 GMT

Hey there,

Lets say OnCommand Systems Manager 9.1P2 we have the following rule indexs 1 & 2. On index 1, we allow all the subnets but on index 2 we don't want a certain subnet. Can somebody confirm this is right direction? I read that the higher rule index that is being evaluated will overide the lower rule index.

Samples:

1 - xxx.xxx.x60.0/19 (in which we allow all subnets at our place).

2 xxx.xxx.x70.0/24 (uncheck both read-only and read/write on access details)

Thanks,

Re: Export policy

SYNTAXERROR — Thu, 09 Nov 2017 07:08:08 GMT

IMHO you should change the order so the fist rule matches and gives an access denied.

Kind regards

Dario

Re: Export policy

SVHO — Thu, 09 Nov 2017 19:45:48 GMT

I tried it and neither work. Do I have to enable SMB first?

Thanks,

Re: Export policy

SYNTAXERROR — Thu, 09 Nov 2017 20:35:48 GMT

You want to use it for SMB and not for NFS?

You have to enable the export-policy for SMB first:

set -privilege advanced
server cifs options modify -vserver vserver_name -is-exportpolicy-enabled true

Re: Export policy

SVHO — Thu, 09 Nov 2017 21:23:19 GMT

For windows shares (CIFS). I guess its part of the SMB...

Re: Export policy

SYNTAXERROR — Thu, 09 Nov 2017 21:42:16 GMT

So you need to enable the mentioned option, otherwise the export-policies will not be enforced by the system...