This specifies the Vserver whose NFS configuration you want to modify.

This optional parameter specifies whether NFS access is enabled on the Vserver.

This optional parameter specifies the maximum number of RPCSEC_GSS authentication contexts, which are used by Kerberos. The default setting is zero at the time of creation. See RFC 2203 for information about RPCSEC_GSS contexts.

This optional parameter specifies, in seconds, the amount of time a RPCSEC_GSS context is permitted to remain unused before it is deleted. The default setting is zero seconds at the time of creation. See RFC 2203 for information about RPCSEC_GSS contexts.

This optional parameter specifies whether to enable access for NFS v3 clients.

This optional parameter specifies whether to enable access for NFSv4.0 clients. The default setting is enabled at the time of creation.

This optional parameter specifies whether to enable NFS access over UDP.

Even if UDP is disabled, if TCP is enabled, the Vserver does not block NFSv3 traffic over UDP. By allowing this traffic, the storage system can process NFS_NULL ops that the Solaris automounter sends to determine if the storage system is alive. (Solaris sends these ops over UDP even if configured to use TCP.) To disallow access for certain clients, including over UDP, you can use export-policy rules. For more information, see the vserver export-policy rule create command.

This optional parameter specifies whether to enable NFS access over TCP.

This optional parameter specifies a list of default Windows users for the NFS server.

This optional parameter specifies whether EJUKEBOX errors are enabled for NFSv3. The default setting is true at the time of creation.

This optional parameter specifies whether NFSv3 read operations are required to return read attributes. The default setting is false at the time of creation.

This optional parameter specifies whether Data ONTAP shows changes in file system identifiers (FSIDs) as NFSv3 clients traverse file systems. If you change the value of this parameter, clients must remount any paths over which they are using NFSv3.

This optional parameter specifies whether NFS v3 connection drop is enabled. The default setting is enabled at the time of creation.

This optional parameter specifies how NFSv3 security changes affect NTFS volumes. If you set this parameter to ignore , Data ONTAP ignores NFSv3 security changes. If you set this parameter to fail , this overrides the unix security options set in the relevant export rules. If you set this parameter to use_export_policy , Data ONTAP processes NFSv3 security changes in accordance with the relevant export rules. The default setting is use_export_policy at the time of creation.

This optional parameter specifies whether file ownership can be changed only by the superuser, or if a non-root user can also change file ownership. If you set this parameter to restricted , file ownership can be changed only by the superuser, even though the on-disk permissions allow a non-root user to change file ownership. If you set this parameter to unrestricted , file ownership can be changed by the superuser and by the non-root user, depending upon the access granted by on-disk permissions. If you set this parameter to use_export_policy , file ownership can be changed in accordance with the relevant export rules.

This optional parameter specifies whether Data ONTAP logs NFS requests when they exceed the NFS response trigger time (see the trigger parameter). The default setting is false at the time of creation.

This optional parameter specifies the amount of time, in seconds, after which Data ONTAP must log an NFS request if it has not completed (assuming the -trace-enabled option is set to true ). The default setting is 60 at the time of creation.

This optional parameter specifies the maximum transfer size (in bytes) that the NFS mount protocol negotiates with the client for UDP transport. The range is 8192 to 57344. The default setting is 32768 at the time of creation.

This optional parameter specifies the maximum transfer size (in bytes) that the storage system negotiates with the client for TCP transport of data for NFSv3 and NFSv4.x protocols. The range is 8192 to 1048576. The default setting is 65536 when created. Warning: Increasing/decreasing the value of this parameter could affect the performance for existing connections.

This optional parameter specifies whether Data ONTAP supports NFSv4.0 access control lists (ACLs). The default setting is disabled when created.

This optional parameter specifies whether Data ONTAP supports NFSv4 read delegations. The default setting is disabled when created.

This optional parameter specifies whether Data ONTAP supports NFSv4 write delegations. The default setting is disabled when created.

This optional parameter specifies whether Data ONTAP shows changes in file system identifiers (FSIDs) as NFSv4 clients traverse file systems. The default setting is enabled when created. If you change the value of this parameter, clients must remount any paths over which they are using NFSv4.

If users access the storage system using NFSv4 from Solaris 10 clients, you must set this option to disabled .

This optional parameter specifies whether Data ONTAP supports NFSv4.0 referrals. The default setting is disabled when created. You can set this parameter to enabled only if the -v4-fsid-change option is also set to enabled . If clients accessing the node do not support NFSv4.0 referrals, set this option to disabled ; otherwise, those clients will not be able to access the file system.

This optional parameter specifies the domain portion of the string form of user and group names as defined by the NFSv4 protocol. By default, the domain name is defaultv4iddomain.com. However, the value of this parameter overrides the default. The domain name must be agreed upon by both the NFS client and the storage controller before NFSv4 operations can be executed. It is recommended that the domain be specified in the fully qualified domain name format.

This optional parameter specifies whether Data ONTAP validates the UTF-8 encoding of symbolic link data. The default setting is disabled when created.

This optional parameters specifies the time period in which Data ONTAP irrevocably grants a lock to a client. By default, the lease period is 30 seconds. The minimum value is 10. The maximum value is one less than the value of the ` -v4-grace-seconds` parameter.

This optional parameter specifies the time period in which clients attempt to reclaim their locking state from Data ONTAP during server recovery. By default, the grace period is 45 seconds. The minimum value is 1 more than the value of the -v4-lease-seconds parameter. The maximum value is 90.

This optional parameter specifies if the NFSv4 ACL is preserved or dropped when chmod is performed. In unified security style, this parameter also specifies if NTFS file permissions are preserved or dropped when chmod, chgrp, or chown are performed. The default is enabled .

This optional parameter specifies whether to enable access for NFSv4.1 or later clients. The default setting is enabled at the time of creation.

This optional parameter specifies whether to enable rquota over NFS. The default setting is disabled at the time of creation.

This optional parameter specifies the NFSv4.1 or later implementation domain.

This optional parameter specifies the NFSv4.1 or later implementation name.

This optional parameter specifies the NFSv4.1 or later implementation date.

This optional parameter specifies whether to enable access for pNFS for NFSv4.1 or later. The default setting is disabled at the time of creation.

This optional parameter specifies whether Data ONTAP supports NFSv4.1 or later referrals. The default setting is disabled when created. You can set this parameter to enabled only if the -v4-fsid-change option is also set to enabled . If clients accessing the node do not support NFSv4.1 or later referrals, set this option to disabled ; otherwise, those clients will not be able to access the file system.

This optional parameter specifies whether Data ONTAP supports NFSv4.1 or later access control lists (ACLs). The default setting is disabled when created.

This optional parameter specifies whether to enable vstorage over NFS. The default setting is disabled at the time of creation.

This optional parameter specifies whether to enable the support for numeric string identifiers in NFSv4 owner attributes. The default setting is enabled at the time of creation.

This optional parameter specifies a list of default Windows groups for the NFS server.

This optional parameter specifies whether Data ONTAP supports NFSv4.1 or later read delegations. The default setting is disabled when created.

This optional parameter specifies whether Data ONTAP supports NFSv4.1 or later write delegations. The default setting is disabled when created.

This optional parameter specifies the number of entries in the NFSv4.x session slot table. By default, the number of slots is 180. The maximum value is 2000.

This optional parameter specifies the number of bytes of the reply that will be cached in each NFSv4.x session slot. By default, the size of the cached reply is 640 bytes. The maximum value is 4096.

This optional parameter specifies the maximum number of ACEs in a NFSv4 ACL. The range is 192 to 1024. The default value is 400. Setting it to a value more than the default could cause performance problems for clients accessing files with NFSv4 ACLs.

This optional parameter specifies whether the Vserver allows MOUNT protocol calls only from privileged ports (port numbers less than 1024). The default setting is enabled .

This optional parameter specifies whether the Vserver allows NFS protocol calls only from privileged ports (port numbers less than 1024). The default setting is disabled .

This optional parameter specifies whether Data ONTAP supports fetching auxillary groups from a name service rather than from the RPC header. The default setting is disabled .

This optional parameter specifies the maximum number of auxillary groups supported over RPC security flavors AUTH_SYS and RPCSEC_GSS in Data ONTAP. The range is 32 to 1024. The default value is 32.

This optional parameter specifies whether clustered Data ONTAP performs an additional validation on qtree IDs. The default setting is enabled . This parameter is ignored unless a non-inherited policy has been or is assigned to a qtree.

This optional parameter specifies which port the NFS mount daemon (mountd) uses. The port numbers allowed are 635 (the default) and 1024 through 9999.

This optional parameter specifies which port the network lock manager (NLM) uses. The port numbers allowed are 1024 through 9999. The default setting is 4045 .

This optional parameter specifies which port the network status monitor (NSM) uses. The port numbers allowed are 1024 through 9999. The default setting is 4046 .

This optional parameter specifies which port the NFS quota daemon (rquotad) uses. The port numbers allowed are 1024 through 9999. The default setting is 4049 .

This optional parameter specifies the permitted encryption types for Kerberos over NFS. The default setting is des ,des3 ,aes-128 ,aes-256 .

This optional parameter specifies whether to allow or disallow clients to see the Vserver's NFS exports list. The default setting is enabled .

Showmount leverages the MOUNT protocol in NFSv3 to issue an EXPORT query to the NFS server. If the mount port is not listening or blocked by a firewall, or if NFSv3 is disabled on the NFS server, showmount queries fail.

This optional parameter specifies the protocol to use for doing name service lookups. The allowed values are TCP and UDP . The default setting is UDP .

If you enable this optional parameter, unknown UNIX users that do not have a name mapping to a Windows user are mapped to the configured default Windows user. This allows all unknown UNIX users access with the credentials of the default Windows user. If you disable it, all unknown UNIX users without name mapping are always denied access. By default, this parameter is enabled.

If you enable this optional parameter, during client access check evaluation in a netgroup, Data ONTAP performs an additional verification to ensure that the domain returned from DNS for that client is listed in the DNS configuration of the Vserver. This enables you to validate the domain when clients have the same short name in multiple domains. The default setting is enabled .

This optional parameter specifies if you can consider a no-match result from any of the netgroup ns-switch sources to be authoritative. If this option is enabled, then a no-match response from any of the netgroup ns-switch sources is deemed conclusive even if other sources could not be searched. The default setting is 'disabled', which causes all netgroup ns-switch sources to be consulted before a no-match result is deemed conclusive.

This optional parameter controls the permissions that are displayed to NFSv3 and NFSv4 clients on a file or directory that has an NT ACL set. When true, the displayed permissions are based on the maximum access granted by the NT ACL to any user. When false, the displayed permissions are based on the minimum access granted by the NT ACL to any user. The default setting is false .

This optional parameter specifies whether to enable access for NFSv3 MS-DOS clients. The default setting is disabled at the time of creation.

This optional parameter specifies whether Windows ACLs affect root access from NFS. If this option is enabled, root access from NFS ignores the NT ACL set on the file or directory. If auditing is enabled for the Vserver and there is no name-mapping present, then a default SMB credential (Builtin\administrator) is used for auditing, and an EMS warning is generated. The default setting is 'disabled', which causes NFS 'root' to be mapped to a Windows account, like any other NFS user.

This optional parameter specifies the age of the positive cached credentials after which they will be cleared from the cache. The value specified must be between 60000 and 604800000. The default setting is 86400000 .

This optional parameter specifies the age of the negative cached credentials after which they will be cleared from the cache. The value specified must be between 60000 and 604800000. The default setting is 7200000 .

This optional parameter specifies if permission checks are to be skipped for NFS WRITE calls from root/owner. For copying read-only files to a destination folder which has inheritable ACLs, this option must be enabled . Warning: When enabled , if an NFS client does not make use of an NFS ACCESS call to check for user-level permissions and then tries to write onto read-only files, the operation will succeed. The default setting is disabled .

This optional parameter specifies whether Data ONTAP uses 64 bits (instead of 32 bits) for file system identifiers (FSIDs) and file identifiers (file IDs) that are returned to NFSv3 clients. If you change the value of this parameter, clients must remount any paths over which they are using NFSv3. When -v3-fsid-change is disabled, enable this parameter to avoid file ID collisions.

This optional parameter specifies whether the client-specified mode bits should be ignored and the inherited NFSv4 ACL should be preserved when creating new files or directories. The default setting is disabled .

This optional parameter specifies whether to continue search without converting the filename to the Unicode character set while doing lookup in a directory.

This optional parameter specifies the number of read or write operations on a file from a single client that are grouped and considered as one session for event generation applications, such as FPolicy. The event is generated on the first read or write of a file, and subsequently the event is generated only after the specified -file-session-io-grouping-count . The default value is 5000 .

This optional parameter specifies the duration for which the read or write operationss on a file from a single client are grouped and considered as one session for event generation applications, such as FPolicy. The default value is 120 seconds.

This optional parameter specifies whether to enable replay cache checksum for NFS requests. The default value is enabled .

This optional parameter specifies the harvest timeout for cached credentials. The value specified must be between 60000 and 604800000. The default setting is 86400000 .

This optional parameter specifies the idle connection timeout for NFS connections. The value specified must be between 120 and 86400.

This optional parameter specifies whether killing idle NFS connections is allowed or not. The default setting for -allow-idle-connection-timeout is enabled .

This optional parameter specifies whether to hide the .snapshot directory while listing under NFSv3 mount points. However an explicit access to the .snapshot directory will still be allowed even though the option is enabled. The default setting is disabled at the time of creation.

This optional parameter specifies whether to provide root path as showmount state when -showmount parameter is disabled. The default value for showmount-rootonly is disabled .

This optional parameter specifies whether Data ONTAP uses 64 bits (instead of 32 bits) for file system identifiers (FSIDs) and file identifiers (file IDs) that are returned to NFSv4.x clients. If you change the value of this parameter, clients must remount any paths over which they are using NFSv4.x. When -v4-fsid-change is disabled, enable this parameter to avoid file ID collisions.

This optional parameter specifies whether to enable security labels for NFSv4.2. The default setting for -v4.2-seclabel is disabled .

This optional parameter specifies whether to enable NFS access over RDMA. The default setting for parameter -rdma is enabled .

This optional parameter specifies whether to enable trunking for NFSv4.1. The default setting for -v4.1-trunking is disabled .

If the -v4.1-trunking is set to enabled and if users access the storage system using NFSv4.1 with NFS clients that don't support session trunking, they may see performance drop, due to use of a single TCP connection for the multiple mounts to the SVM data LIFs.

If the -v4.1-trunking is changed from enabled to disabled and if users access the storage system using NFSv4 with trunking mount then client may see IO hung issue, because on the client side session trunking is still in use and on the Nfs4 server side it is getting disabled. Remount is required on the Nfs client if such issue happens.

This optional parameter specifies whether to enable sparsefile ops for NFSv4.2. The default setting for -v4.2-sparsefile-ops is disabled .

This optional parameter specifies whether to enable extended attributes for NFSv4.2. The default setting for -v4.2-xattrs is enabled .

This optional parameter specifies whether to enable admin revoked sequence flag support for NFSv4. Once enabled, when any of the client state is marked as revoked on the server side, the NFS server sends a SEQ4_STATUS_ADMIN_STATE_REVOKED flag in the SEQUENCE operation reply. The default setting for -v4.1-sequence-admin-revoked is disabled .

This optional parameter specifies whether to enable ACL compliance support for NFSv4 newly created files/directory. Once enabled, the EVERYONE@ ACE mask will be mapped to UNIX 'owner' and 'group' as well, along with UNIX 'other'. UNIX 'owner' will no longer be considered under GROUP@ ACE. The default setting for -v4-acl-compliance is disabled .