How Can We Help?
NetApp ONTAP Default Export Policy
The following is a basic “default” export-policy rule for SVMs that have a namespace (NAS only). The rule will prevent writing to the root volume but allow reading and traversing it to the junction.
- Policy Name: default
- Rule Index: 1
- Access Protocol: nfs
- Client Match Hostname, IP Address, Netgroup, or Domain:
- RO Access Rule: none
- RW Access Rule: never
- Superuser Security Types: none
- Honor SetUID Bits in SETATTR: true
- Allow Creation of Devices: true
cluster::> vserver export-policy rule create -vserver vs01 -policyname default -ruleindex 1 -protocol nfs -clientmatch 0.0.0.0/0 -rorule none -rwrule never -superuser none -allow-suid true -allow-dev true