Allowing or disallowing protocols for a vFiler unit

Protocols that a vFiler unit can use

By default, a vFiler unit can use the protocols that are licensed for the hosting storage system. For example, if the hosting storage system is licensed for CIFS and NFS, the vFiler units created can also use the CIFS and NFS protocols. You can select those protocols that you allow or disallow on the vFiler units.

The maximum number of FTP connections to a vFiler unit is determined by the ftpd.max_connections option set on the hosting storage system. The value set for this option is shared among the vFiler units on a storage system on a first-come, first-served basis.

Allowing and disallowing protocols

You can select the protocols that you allow on the vFiler units using the vfiler allow command. You can select the protocols that you disallow on the vFiler units using the vfiler disallow command. vFiler units support the following protocols:

CIFS
NFS
rsh
iSCSI
FTP
HTTP

To allow CIFS, NFS, FTP, or HTTP on a vFiler unit, each of the allowed protocols must have an active license on the hosting storage system.

Effects of disallowing CIFS, NFS, iSCSI, FTP, and HTTP

If a CIFS, NFS, iSCSI, FTP, or HTTP protocol is running and you disallow it, the protocol continues to run until the storage system reboots, but packets destined for the vFiler unit are ignored.

Effects of disallowing iSCSI

After iSCSI is disallowed on a vFiler unit, the following conditions apply on that vFiler unit:

You cannot start iSCSI (the iscsi start command is rejected).
No new iSCSI sessions are allowed.
iSCSI commands on existing sessions are rejected.

Effects of disallowing FTP

After FTP is disallowed on a vFiler unit, no new FTP connections are allowed to the vFiler unit; however, transfers that started before FTP was disallowed will finish.

Effects of disallowing HTTP

After HTTP is disallowed on a vFiler unit, no new HTTP connections are allowed on the vFiler unit. Each new request receives a "503 HTTP server is disabled" message. Any existing connections remain alive.

Effects of disallowing rsh

Although the Data ONTAP rsh.enable option value (On or Off) determines whether the RSH server is enabled or disabled on a storage system, disallowing rsh on a vFiler unit is independent of the value for that option. That is, a vFiler unit can be configured to disallow rsh even when the rsh.enable option is set to On.

Note
You must have the rsh.enable option set to On and the vFiler unit configured to allow rsh on a vFiler unit.