How to manually unblock NFS access that blocked by Workload security
Applies to
NetApp Workload Security
Answer
Manually Restore IPs for NFS
Use the following steps to manually restore any IPs from ONTAP if your Workload Security trial expires, or if the agent/collector is down.
-
List all export policies on an SVM.
:> export-policy rule show -vserver <svm name>
Policy Rule Access Client RO
Vserver Name Index Protocol Match Rule
------------ --------------- ------ -------- --------------------- ---------
svm0 default 1 nfs3, cloudsecure_rule, never
nfs4, 10.11.12.13
cifs
svm1 default 4 cifs, 0.0.0.0/0 any
nfs
svm2 test 1 nfs3, cloudsecure_rule, never
nfs4, 10.11.12.13
cifs
svm3 test 3 cifs, 0.0.0.0/0 any
nfs,
flexcache
4 entries were displayed.
-
Delete the rules across all policies on the SVM which have “
cloudsecure_rule” as Client Match by specifying its respective RuleIndex. Workload Security rule will usually be at 1.
::*> export-policy rule delete -vserver <svm name> -policyname * -ruleindex 1
-
Ensure Workload Security rule is deleted (optional step to confirm).
::*> export-policy rule show -vserver <svm name>
Policy Rule Access Client RO
Vserver Name Index Protocol Match Rule
------------ --------------- ------ -------- --------------------- ---------
svm0 default 4 cifs, 0.0.0.0/0 any
nfs
svm2 test 3 cifs, 0.0.0.0/0 any
nfs,
flexcache
2 entries were displayed.
Additional Information