Oracle ZFS Storage Appliance Administration Manual page 411

BUI value
SMB Protocol Share Mode Exceptions
Exceptions to the global sharing mode may be defined for clients or collections of clients by
setting client-specific share modes or exceptions. To restrict access to certain clients, set the
global sharing mode to none and increasingly grant access to smaller and smaller groups. For
example, you could create a share with the global sharing mode set to none, which denies
access to all clients, and then grant read-only access to a subset of the clients. Further, you
could grant read/write access to an even smaller subset of the clients and, finally, only trusted
hosts might have read/write access.
Client Types
TABLE 112
Type
Host(FQDN) or Netgroup
DNS Domain
IPv4 Subnet
IPv6 Subnet
For each client or collection of clients, you specify whether the client has read-only or read-
write access to the share.
Managing netgroups - Netgroups can be used to control access for SMB exports. However,
managing netgroups can be complex. Consider using IP subnet rules or DNS domain rules
instead.
CLI value
CLI Prefix Description
A single client whose IP
none
address resolves to the
specified fully qualified
name, or a netgroup
containing fully qualified
names to which a client's IP
address resolves.
All clients whose IP
.
addresses resolve to a fully
qualified name ending in
this suffix.
@ All clients whose IP
addresses are within the
specified IPv4 subnet,
expressed in CIDR notation.
@ All clients whose IP
addresses are within the
specified IPv6 subnet,
expressed in CIDR notation.
Share and Project Protocols
Description
from the share are cached on the
local client and available offline.
Files are automatically reintegrated
when the local client is online again.
Example
caji.sf.example.com
sf.example.com
192.0.2.254/22
2001:db8:410:d43::/64
Shares and Projects 411