跳转到主内容

是否可以在 ONTAP 中禁用 RPC 端口 111 ( portmap )?

Views:
83
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
nas
Last Updated:

可不使用  

适用场景

  • 7-模式 Data ONTAP
  • Data ONTAP 8
  • ONTAP 9

问题解答

  • 在 Data ONTAP 7- 模式中,目前无法禁用 Portmapper (端口 111 )
  • 在 ONTAP 9.3 及更早版本(包括集群模式 Data ONTAP 8.x )中、在依赖内置 ONTAP 防火墙而非第三方防火墙的网络配置中、端口 111 始终可以访问 Portmap 服务( rpcbind )。

  • 从 ONTAP 9.4 开始、您可以修改防火墙策略、以控制特定 LIF 上是否可以访问 portmap 服务。

  • 从 ONTAP 9.7 开始,不再使用 portmap 防火墙服务,而是自动为支持 NFS 服务的所有 LIF 打开 portmap 端口。

追加信息

有关详细信息,请参见 Configuring Firewall Services and Policies for LIF

 

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.