Where can I see what client IP addresses were denied by export policies?
Applies to
- ONTAP 9
- Export policies (for both NFS and CIFS)
Answer
- Access denials due to export policy evaluations are logged in the mgwd.log file
- To view this log file:
- Navigate to the SPI at
https://<cluster_mgmt_interface>
/spi
- Login with cluster admin credentials
- For the node that the client attempted to connect to, select
logs
- select
mlog
- Locate the
mgwd.log
file and select it to download - Searching for the phrase "Authoritatively returning zero rules" within the document should identify any instance where a client was not authorized access when evaluated against the export policy rules for a volume
- Navigate to the SPI at
Additional Information
additionalInformation_text