IN THIS ARTICLE
- Outlines how to create NFS Exports with multiple IP restrictions via the CLI
- Cluster running Qumulo Core
- Command line (CLI) tools installed via API & Tools tab
PROCESS OR DETAILS
Leveraging the Qumulo API via the command line interface, users can create an nfs export with multiple IP address restrictions. There are two ways to accomplish this: via the cli, or via the api in the Qumulo dashboard. Below is the documentation on how to accomplish this via the cli.
- Within the operating system of a Qumulo node (/var/tmp, /home, etc....), create a text file (let's call it nfs_restriction1.json) with the following content:
- The IP restrictions will be enforced in the order they are written, from top to bottom. Please be aware of this as you create your list of rules. An easy way to prevent unintended results is to list IP-specific rules at the top of the list and Subnet-wide rules at the bottom.
- Please note that each section of the snippet below is creating three separate restrictions. You can create less or more, depending on your use case. Also, The below IP addresses are for demonstration purposes only.
- Assign the restrictions spec to the NFS share on creation (a) or by modifying (b) the share:
$ qq nfs_add_share --export-path / --fs-path / --restrictions nfs_restrictions1.json
- Verify the restrictions are in place accordingly:
Once the rules have been applied the json file is no longer required and can be deleted or saved elsewhere for your own documentation.
NFS Exports that have multiple IP restrictions applied can only be deleted via the command line below:
You should now be able successfully create NFS exports with Multiple IP Restrictions
Like what you see? Share this article with your network!