Network and Storage Protocols

CIFS allow rule based on IP Address

lee_harrison
6,611 Views

Hi all, I am wondering if there is any way to setup allow rules on CIFS shares to restrict share access from only one host based on IP address. I have a share that I only want to be able to access from one server for security reasons.

This would be similar to the "rw=10.0.0.1" paramter you can set on NFS exports.

I have seen reference to restricting whole domains and subnets to accessing a filers shares using the usermap.cfg file (https://kb.netapp.com/support/index?page=content&id=1010514) but this doesnt seem to offer what I need.

Any help appreciated.

1 ACCEPTED SOLUTION

waldrop
6,611 Views

The only way possible in 7-Mode is what you see in the KB article.  In Clustered Data ONTAP you can create was are called export-policy rules that would do more what you are referencing.

View solution in original post

3 REPLIES 3

thomas_glodde
6,611 Views

its not possible.

you might create a local cifs user specificaly for that server only tho and create a share where only that user can have access.

lee_harrison
6,611 Views

Guessing the resounding silence means there's no way to do this? Anyone .... ???

waldrop
6,612 Views

The only way possible in 7-Mode is what you see in the KB article.  In Clustered Data ONTAP you can create was are called export-policy rules that would do more what you are referencing.

Public