跳转到主内容

如何手动取消阻止受工作负载安全性阻止的NFS访问

Views:
4
Visibility:
Public
Votes:
0
Category:
cloud-insights<a>导出策略</a><a>取消阻止</a><a>云安全规则</a>
Specialty:
oci
Last Updated:

适用场景

NetApp工作负载安全性 

问题解答

手动还原NFS的IP

如果您的工作负载"安全"试用到期、或者代理/收集器已关闭、请使用以下步骤手动从ONTAP还原任何IP。

  1. 列出SVM上的所有导出策略。

:> export-policy rule show -vserver <svm name>
       Policy      Rule   Access   Client         RO
Vserver    Name       Index   Protocol Match          Rule
------------ --------------- ------  -------- --------------------- ---------
svm0     default     1    nfs3,   cloudsecure_rule,    never
                   nfs4,   10.11.12.13
                   cifs
svm1     default      4    cifs,   0.0.0.0/0        any
                   nfs
svm2     test       1    nfs3,   cloudsecure_rule,    never
                   nfs4,   10.11.12.13
                   cifs
svm3     test       3    cifs,   0.0.0.0/0        any
                   nfs,
                   flexcache
4 entries were displayed.

  1. cloudsecure_rule通过指定相应的规则索引、删除SVM上以""作为客户端匹配项的所有策略中的规则。工作负载安全规则通常为1。

::*>导出策略规则delete -vserver <svm name>-policyname *-ruleindex 1

  1. 确保已删除工作负载安全规则(确认的可选步骤)。

::*> export-policy rule show -vserver <svm name>
       Policy      Rule   Access   Client         RO
Vserver    Name       Index   Protocol Match          Rule
------------ --------------- ------  -------- --------------------- ---------
svm0      default      4     cifs,   0.0.0.0/0        any
                   nfs
svm2      test       3     cifs,   0.0.0.0/0        any
                   nfs,
                   flexcache
2 entries were displayed.

追加信息

阻止用户访问

 

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.