SMB/CIFS export policy IP address restriction does not work as expected
Applies to
ONTAP 9
Issue
- SMB/CIFS export policy configured to restrict access to specific IP address ranges does not behave as expected
- Devices within allowed IP segments unable to access SMB share
- Devices outside allowed IP segments able to access SMB share
- Export policy rules set for CIFS protocol with clientmatch for specific subnets
- Attempt to restrict SMB/CIFS data access using service-policy allowed-addresses fails
- Export policy applied only to data volume, not to SVM root volume
- SMB/CIFS access control does not reflect intended IP-based restrictions
