How do you configure an NFS export policy on ONTAP?

How do you configure an NFS export policy on ONTAP?

• A. Define an export policy with client rules (host IPs or networks and RO/RW), attach to a volume, and ensure root access as needed.
• B. Define an SMB share and assign Windows permissions.
• C. Enable NFS without any export policy.
• D. Export policies are only for CIFS.

Answer: (A)

NFS access on ONTAP is governed by export policies, which are the mechanism you use to control which clients can reach a volume and with what permissions. Start by creating an export policy, then add rules that specify exactly who is allowed to access (using client-match entries like IPs or subnets) and what they can do (read-write or read-only). You can also configure whether the root user from those clients has root access or is restricted. Once the policy is defined, attach it to the target volume so the policy takes effect for that volume. This setup is what actually governs NFS access; simply enabling NFS or using Windows shares is not how NFS access is restricted. Export policies are for NFS, while SMB/CIFS uses its own share permissions, not export-policy rules.

NFS access on ONTAP is governed by export policies, which are the mechanism you use to control which clients can reach a volume and with what permissions. Start by creating an export policy, then add rules that specify exactly who is allowed to access (using client-match entries like IPs or subnets) and what they can do (read-write or read-only). You can also configure whether the root user from those clients has root access or is restricted. Once the policy is defined, attach it to the target volume so the policy takes effect for that volume. This setup is what actually governs NFS access; simply enabling NFS or using Windows shares is not how NFS access is restricted. Export policies are for NFS, while SMB/CIFS uses its own share permissions, not export-policy rules.