Skip to main content
NetApp Knowledge Base

What version of SMB that will be used for communication between Ontap and a DC?

Views:
195
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
cifs
Last Updated:

Applies to

Ontap 9

Answer

The version of SMB that will be negotiated for communication between ONTAP and the DC will depend on the values for the following parameters to the vserver cifs security settings

  • If smb1-enabled-for-dc-connections is enabled then SMB1 will be available for negotiation
  • If smb2-enabled-for-dc-connections is enabled then SMB2 will be available for negotiation
  • If encryption-required-for-dc-connections is enabled then only SMB3 will be available for the session

Additional Information

  • The option encryption-required-for-dc-connections has been introduced in ontap 9.8
  • The default value for each of this options depends on the release of ontap, as of 9.8 both SMB1 and SMB2 are enabled but encryption is disabled
  • An ontap upgrade may change the default setting for newly crated vservers but will not change these options for existing vservers
  • SMB1 use is deprecated and may be removed in future releases
  • For further information about the vserver cifs security commands check Ontap 9 Documentation on the command

 

 

******************************************************* *******************************************************