Acopia Networks 810-0044-00 Manual de instalación Pagina 97

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 492
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 96
Preparing for NFS Authentication
Adding an NFS Access List
CLI Storage-Management Guide 4-19
bstnA6k(gbl-nfs-acl[westcoast])# ...
Reverting to the Default User ID
As with the GID, an access list uses the default UID of 65534 when it performs root
squashing. From gbl-nfs-acl mode, use the
no anonymous-uid command to revert to
this default:
no anonymous-uid
For example:
bstnA6k(gbl)# nfs-access-list westcoast
bstnA6k(gbl-nfs-acl[westcoast])# no anonymous-uid
bstnA6k(gbl-nfs-acl[westcoast])# ...
Adding a Deny Rule
You may have a situation where most of a large subnet should be permitted access to
NFS, but some portions of the subnet should be denied access. From gbl-nfs-acl
mode, use the
deny command to add a deny rule for one subnet:
deny ip-address mask
where
ip-address is the address of the subnet, and
mask defines the network part of the ip-address.
For example, the following command sequence denies access to two Class-C subnets,
but then permits access to any IP outside those subnets but inside their Class-B
supernet, 192.168.0.0/16:
bstnA6k(gbl)# nfs-access-list eastcoast
bstnA6k(gbl-nfs-acl[eastcoast])# deny 192.168.77.0 255.255.255.0
bstnA6k(gbl-nfs-acl[eastcoast])# deny 192.168.202.0 255.255.255.0
bstnA6k(gbl-nfs-acl[eastcoast])# permit 192.168.0.0 255.255.0.0
bstnA6k(gbl-nfs-acl[eastcoast])# ...
Vista de pagina 96
1 2 ... 92 93 94 95 96 97 98 99 100 101 102 ... 491 492

Comentarios a estos manuales

Sin comentarios