PowerScale OneFS Web Administration Guide

SMB shares in access zones

You can create and manage SMB shares within access zones.

You can create access zones that partition storage on the cluster into multiple virtual containers. Access zones support all configuration settings for authentication and identity management services on the cluster. That means that you can configure authentication providers and provision SMB shares on a zone-by-zone basis. When you create an access zone, a local provider is created automatically. That allows you to configure each access zone with a list of local users and groups. You can also authenticate through a different Active Directory provider in each access zone. You can also control data access by directing incoming connections to the access zone from a specific IP address in a pool. Associating an access zone with an IP address pool restricts authentication to the associated access zone and reduces the number of available and accessible SMB shares.

Here are a few ways to simplify SMB management with access zones:

• Migrate multiple SMB servers, such as Windows file servers or NetApp filers, to a single PowerScale cluster, and then configure a separate access zone for each SMB server.
• Configure each access zone with a unique set of SMB share names that do not conflict with share names in other access zones, and then join each access zone to a different Active Directory domain.
• Reduce the number of available and accessible shares to manage by associating an IP address pool with an access zone to restrict authentication to the zone.
• Configure default SMB share settings that apply to all shares in an access zone.

The cluster includes an integrated access zone named System. The System access zone is where you manage all aspects of the cluster and other access zones. If you do not specify an access zone when managing SMB shares, OneFS defaults to the System zone.