i have a celerra with 2 physical datamover configured in failover mode.
I created 2 Virtual Datamover (VDM) for 2 different CIFS environments.
I need also an NFS server for UNIX servers.
I assigned one IP address and a dns name to the first VDM, a different IP and hostname to the second VDM and another different IP and hostname to the phisical DM (server_2).
Anyway - there has been few replies to both the threads. But I understand what mz99 was asking about is something different. It's not about hiding the NFS export from any unauthorized hosts or not about configuring permission for different hosts.
What I understand from the post, the NFS Exports are seen on the properly configured hosts - there is no issue with that, but the hosts can mount the NFS export using either of the 3 IP Addresses defined on the data mover. Although 2 IP Addresses are configured for the CIFS servers on the VDM and the third one is for NFS use, but all 3 IP Addresses are on the data mover and technically, you can use any of these 3 IP Addresses for contacting the Data mover Network Interface.
Since, NFS v3 works with the MAC address -it does not differentiate by the IP Addresses defined on the same MAC address. All the 3 IP Addresses are on the same subnet and VLAN - so, I don't think there is anyway to configure the NFS exports not to be available on other two IP Addresses.
However, if you want, you may configure a different VLAN for the UNIX hosts and configure the IP Addresses you planned for the NFS export to use that VLAN and the hosts and use the VLAN option with the NFS export configuration to restrict the access from the UNIX hosts limited to use only one Interface.
By the way, I don't think this is a security concern that an authorized host can see the NFS export - by using any of the IP Addresses. Typically the hosts will use the DNS name or the IP Address for the desired Interface for NFS only - and more importantly the hosts can not see any thing else rather that the NFS export when they are using the other two IP Addresses and similarly no other hosts can see the NFS exports as well - so it should not be a security concern.
minksg
2 Intern
•
546 Posts
591
0
Posted August 9th, 2010 12:00
Hi - I moved your question to the support forums, so you'll get the best answer. -Gina