F5 ARX-VE, Planning Manual

Page: 22 / 64

Chapter 1
Site Planning
1 - 16
NFS Servers
When a namespace imports an NFS export/share, the ARX takes inventory
by reading the share’s directory tree as
root . The shares cannot squash root
access by the ARX devices’ proxy IPs, or this tree walk (and therefore the
import) may fail. Set your NFS shares to
no-root-squash for all of your
proxy IPs.
NFS access control is based on the IP addresses of NFS clients; some IP
addresses are allowed and some are not. All of the proxy IP addresses
require exclusive root access to the server’s NFS export.
For a list of all proxy IP addresses on the ARX, issue a
show ip
proxy-addresses
command. Note the addresses that are in use. See the
following example.
bstnA> show ip proxy ‐ addresses
Proxy Address VLAN Mac Address Owner In Use By Proc
‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐ ‐‐‐‐‐‐‐‐‐‐‐ ‐‐‐‐
192.168.25.31/24 25 00:0a:49:17:7c:80 bstnA bstnA 2.1
192.168.25.32/24 25 00:0a:49:17:7c:81 bstnA bstnA 2.2
192.168.25.33/24 25 00:0a:49:17:7c:82 bstnA bstnA 2.3
192.168.25.34/24 25 00:0a:49:17:7c:83 bstnA bstnA 2.4
192.168.25.141/24 25 00:0a:49:17:7c:84 bstnA bstnA 2.5
192.168.25.142/24 25 00:0a:49:17:7c:85 bstnA bstnA 2.6
192.168.25.143/24 25 00:0a:49:17:7c:86 bstnA bstnA 2.7
192.168.25.144/24 25 00:0a:49:17:7c:87 bstnA bstnA 2.8
192.168.25.145/24 25 00:0a:49:17:7c:88 bstnA bstnA 2.9
192.168.25.146/24 25 00:0a:49:17:7c:89 bstnA bstnA 2.10
192.168.25.147/24 25 00:0a:49:17:7c:8a bstnA bstnA 2.11
192.168.25.148/24 25 00:0a:49:17:7c:8b bstnA bstnA 2.12
Do not allow access to these shares from actual clients; changes from other
clients would cause confusion for the namespace software. The only
exception to this rule would be a management client, which may require
access for backups or troubleshooting.
NetApp Shares
A NetApp share requires read/write access and root access for every proxy
IP address. You should exclude non-proxy IP addresses, other than
management IP addresses.
To import a share, navigate to NFS > Manage Exports (in the left-hand
navigation panel) and double-click the share that you want the ARX to
import.
Figure 1.7 shows the NetApp Manage Exports screen.