Skip to main content

Verify NFS client access from the cluster

Contributors netapp-aherbin
PDFs

You can give select clients access to the share by setting UNIX file permissions on a UNIX administration host. You can check client access by using the vserver export-policy check-access command, adjusting the export rules as necessary.

Steps

  1. On the cluster, check client access to exports by using the vserver export-policy check-access command.

    The following command checks read/write access for an NFSv3 client with the IP address 1.2.3.4 to the volume home2. The command output shows that the volume uses the export policy exp-home-dir and that access is denied.

    cluster1::> vserver export-policy check-access -vserver vs1 -client-ip 1.2.3.4 -volume home2 -authentication-method sys -protocol nfs3 -access-type read-write
                                      Policy    Policy     Rule
Path                    Policy        Owner     Owner Type Index  Access
----------------------- ------------- --------- ---------- ------ ----------
/                       default       vs1_root  volume          1 read
/eng                    default       vs1_root  volume          1 read
/eng/home2              exp-home-dir  home2     volume          1 denied

3 entries were displayed.

  2. Examine the output to determine whether the export policy works as intended and the client access behaves as expected.

    Specifically, you should verify which export policy is used by the volume or qtree and the type of access the client has as a result.

  3. If necessary, reconfigure the export policy rules.