Scoping what storage is seen by which hosts using separate IP addresses (FreeNAS 11)

[aenagy]

I need to scope which hosts see which storage, e.g. group A hosts see only group X storage (iSCSI and/o NFS), group B hosts see only group Y storage (different iSCSI and/or NFS). After reading "Multiple network interfaces on a single subnet" (https://forums.freenas.org/index.php?threads/multiple-network-interfaces-on-a-single-subnet.20204/) am I correct in thinking that I want/need ifconfig aliases as described in "11.6. Virtual Hosts" (https://www.freebsd.org/doc/handbook/configtuning-virtual-hosts.html)?

I am not looking to improve performance or load balance.

Thanks.

 

[aenagy]

I just discovered that this approach will not work.

I did discover Alias in "Network > Interfaces > [NIC] > Edit" and then scroll down. This works for iSCSI. I don't see how this helps for NFS. I can select IP addresses in "Services > NFS", but I don't see how to scope specific IP addresses to specific NFS shares.

 

[dlavigne]

That is done on the share level. However, there are network/filesystem caveats (see http://doc.freenas.org/11/sharing.html#unix-nfs-shares) which will require you to carefully plan your setup.

 

[aenagy]

That is done on the share level. However, there are network/filesystem caveats (see http://doc.freenas.org/11/sharing.html#unix-nfs-shares) which will require you to carefully plan your setup.

I had seen "Authorized IP addresses or hosts", but was wondering if there was a way to control on which IP addresses the NFS server would listen, similar to iSCSI.

Thanks.

 

[dlavigne]

I had seen "Authorized IP addresses or hosts", but was wondering if there was a way to control on which IP addresses the NFS server would listen, similar to iSCSI.

Yup, that one is the "Bind IP Addresses" in Services -> NFS.

So: Sharing -> NFS is per share restrictions, and Services -> NFS is the service itself.

 

[aenagy]

Yup, that one is the "Bind IP Addresses" in Services -> NFS.

So: Sharing -> NFS is per share restrictions, and Services -> NFS is the service itself.

I get it now. I was hoping (wishing) that NFS had similar granularity in this regards (association between unit of storage and specific IP addresses).

Thanks for your help.