In NetApp ONTAP, an export policy is the specific mechanism used to control and determine which NFS clients are granted access to data on a volume or qtree. An export policy is a set of one or more export rules. When an NFS client attempts to mount or access a volume, ONTAP checks the associated export policy. It evaluates the rules to find a match for the client's IP address, subnet, or netgroup, which then dictates the access rights (e.g., read-only, read-write) and security protocols (e.g., sys, Kerberos) the client can use. This policy is essential for securing NFS exports.

A. Service: Service policies, specifically Quality of Service (QoS) policies, are used to manage storage performance by setting throughput limits (IOPS or MB/s), not for controlling client access permissions.

B. Tiering: Tiering policies (FabricPool) manage the placement of data across different storage tiers (e.g., SSD and cloud) based on data temperature, not client access rights.

D. Snapshot: Snapshot policies define the schedule for creating and retaining point-in-time copies of a volume for data protection purposes, not for managing access to the active filesystem.

1. NetApp ONTAP 9 Documentation

NFS management

"How export policies work": "To export a volume or qtree

you must create an export policy for it... An export policy is a set of one or more export rules that you associate with a volume or qtree. The export policy and its rules determine which clients have access to the data."

2. NetApp ONTAP 9 Documentation

Logical storage management

"What are export policies": "Export policies... define client access to volumes. You must have at least one export policy and at least one export rule to give clients access to data on the SVM."

3. NetApp ONTAP 9 Documentation

Command Reference

vserver export-policy create: "This command creates an export policy. An export policy is a collection of export rules that can be applied to a volume to control which clients can access the volume and with what access permissions."