Unexpected NFS connections seen despite export-policy configured only for few clients
Applies to
- ONTAP 9
- NFS
Issue
- Access is being granted to clients that are not part of the export-policy.
cluster1::> nfs connected-clients show -volume vol1 -node Node1
Node: Node1
Vserver: svm1
Data-Ip: 1.2.1.2
Client-Ip Volume-Name Protocol Idle-Time Local-Reqs Remote-Reqs
--------------- ---------------- -------- ------------- ---------- -----------
1.1.1.1 vol1 nfs3 2h 1m 7s 2 0 >> client not part of export policy
1.2.1.2 vol1 nfs3 1d 17h 52m 26s 4 0 >> client not part of export policy
1.3.1.3 vol1 nfs3 12h 54m 45s 128 0 >> client not part of export policy
8.8.8.8 vol1 nfs3 1d 12h 38m 38s 16 0
1.4.1.4 vol1 nfs3 14m 41s 212 0 >> client not part of export policy
5 entries were displayed.
- Multiple NFS connections despite export-policy is configured only for few servers.
cluster1::> export-policy rule show -policyname Policy1
Policy Rule Access Client RO
Vserver Name Index Protocol Match Rule
------------ --------------- ------ -------- --------------------- ---------
SVM1 Policy1 1
nfs 9.9.9.9 sys
SVM1 Policy1 2
nfs3 8.8.8.8 sys
SVM1 Policy1 3
nfs3 7.7.7.7 sys
3 entries were displayed.