Skip to main content

Supported SMB versions and functionality

Contributors netapp-dbagwell netapp-forry netapp-thomi netapp-ahibbard netapp-aherbin
PDFs

Server Message Block (SMB) is a remote file-sharing protocol used by Microsoft Windows clients and servers. In ONTAP 9, all SMB versions are supported; however, default SMB 1.0 support depends on your ONTAP version. You should verify that the ONTAP SMB server supports the clients and functionality required in your environment.

The latest information about which SMB clients and domain controllers ONTAP supports is available in the Interoperability Matrix Tool.

SMB 2.0 and later versions are enabled by default for ONTAP 9 SMB servers, and can be enabled or disabled as needed. The following table shows SMB 1.0 support and default configuration.

SMB 1.0 functionality: In these ONTAP 9 releases:

9.0

9.1

9.2

9.3 and later

Is enabled by default

Yes

Yes

Yes

No

Can be enabled or disabled

No

Yes*9.1 P8 or later required.

Yes

Yes
Note

Default settings for SMB 1.0 and 2.0 connections to domain controllers also depend on the ONTAP version. More information is available in the vserver cifs security modify man page. For environments with existing CIFS servers running SMB 1.0, you should migrate to a later SMB version as soon as possible to prepare for security and compliance enhancements. Contact your NetApp representative for details.

The following table shows which SMB features are supported in each SMB version. Some SMB features are enabled by default and some require additional configuration.

This functionality: Requires enablement: Is supported in ONTAP 9 for these SMB versions:

1.0

2.0

2.1

3.0

3.1.1

Legacy SMB 1.0 functionality

X

X

X

X

X

Durable handles

X

X

X

X

Compounded operations

X

X

X

X

Asynchronous operations

X

X

X

X

Increased read and write buffer sizes

X

X

X

X

Increased scalability

X

X

X

X

SMB signing

X

X

X

X

X

X

Alternate Data Stream (ADS) file format

X

X

X

X

X

X

Large MTU (enabled by default beginning with ONTAP 9.7)

X

X

X

X

Lease oplocks

X

X

X

Continuously available shares

X

X

X

Persistent handles

X

X

Witness

X

X

SMB encryption: AES-128-CCM

X

X

X

Scale out (required by CA shares)

X

X

Transparent failover

X

X

SMB Multichannel (beginning with ONTAP 9.4)

X

X

X

Preauthentication integrity

X

Cluster client failover v.2 (CCFv2)

X

SMB encryption: AES-128-GCM (beginning with ONTAP 9.1)

X

X
Related information

Using SMB signing to enhance network security

Setting the SMB server minimum authentication security level

Configuring required SMB encryption on SMB servers for data transfers over SMB

NetApp Interoperability