Configuring SpanFS subnet whitelists for NetBackup access
SpanFS enforces IP based access control for filesystem RPC operations. To allow NetBackup media servers and clients to communicate with the SpanFS file system during Direct-IO operations, you must configure one or more IP subnet whitelists on the SpanFS cluster. Only the systems within these whitelisted subnets are permitted to access SpanFS services.
You can use the iris_cli command-line tool to manage subnet whitelists.
To configure subnet whitelists for NetBackup
- Add an IP subnet to the whitelist.
iris_cli cluster add-subnet-to-whitelist subnet-ip=<IPv4 address> subnet-mask-ip4=<IPv4 subnet mask>
- View all subnet entries currently allowed to access SpanFS.
iris_cli cluster get-subnet-whitelist
- Remove a subnet from the whitelist.
iris_cli cluster remove-subnet-from-whitelist subnet-ip=<subnet IPv4 address>