NetApp
Vserver : Policies > Export Policies : Understanding export policies : Export policy and rule concepts
Export policy and rule concepts
Export policies enable you to restrict access to volumes to clients that match specific IP addresses and specific authentication types. An export policy with export rules must exist on a Vserver for clients to access data.
You can associate exactly one export policy with each volume. However, a Vserver can contain multiple export policies. This enables you to assign different export policies to each volume in a Vserver, or to assign a given export policy to more than one volume. A Data ONTAP cluster can contain up to 1,024 export policies.
Export policies consist of individual export rules. An export policy can contain a large number of rules (approximately 4,000).
Important things to know about export rules:
•
Each export rule specifies access permissions to volumes for one or more clients.
The clients can be specified by host name, IP address, or netgroup.
•
Export rules can use host entries from a netgroup.
•
Export rules are processed in the order in which they appear in the export policy.
The rule order is dictated by the rule index number.
•
Export rules specify the authentication types that are required for both read-only and read/write operations.
•
To have any access to a volume, matching clients must authenticate with the authentication type specified by the read-only rule.
•
To have write access to the volume, matching clients must authenticate with the authentication type specified by the read/write rule.
If a client makes an access request that is not permitted by the applicable export policy, the request fails with a permission-denied message. If a client does not match any rule in the volume's export policy, then access is denied. If an export policy is empty, then all accesses are implicitly denied.
You can modify an export policy dynamically on a system running Data ONTAP.

Was this topic helpful? Send comments to NetApp.