Hello Michael,
- The best way is to define a VLAN for each protocol on Netapp and client ( for example VLAN1 for NFS, and VLAN2 for Cifs) , and configure each VLAN on one interface ( for example e0a for VLAN1 and e0b for VLAN2). if you don't have enough interfaces, you can use VLAN tagging.
- You can also, with DOT 8.1, disable protocol by interface with these options :
options interface.blocked.cifs
options interface.blocked.nfs