跳转到主内容

是否可以对一个特定CIFS共享启用加密

  1. 最后更新
  2. 另存为PDF
Views:
5
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

适用场景

  • ONTAP 9
  • CIFS
  • AES加密

问题解答

可以、可以通过以下步骤为特定共享启用加密。

  1. 运行以下命令为所需共享启用加密。
cluster1::> vserver cifs share properties add -vserver <VSERVERNAME> -share-name <SHARENAME> -share-properties encrypt-data
  1. 让用户手动断开并重新连接到共享、以应用更改。
  1. 运行以下命令以确认加密功能可用于所有CIFS会话。
Cluster01::> vserver cifs session show -vserver <VSERVERNAME> -fields smb-encryption-status
 
注:
  • 除非客户端重新连接到共享、否则加密将不起作用、因为现有会话未加密。
  • SMB3及更高版本支持SMB加密
  • 由于加密是在共享级别而不是服务器级别强制实施的、因此会话将部分加密

追加信息

添加了Vserver CIFS共享属性

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.