VMware mounts shared storage----NFS v4.1

1 Create a domain account 1.1 create an NFS dedicated domain account and configure the Account DES encryption type.

1.2 Permissions granted to account Domain Admin

2 Configuring SVM 2.1 to create SVM and root volumes on NetApp

>vserver create-vserver nfs-rootvolume nfs_root-aggregate aggr1-rootvolume-security-style unix-language C.UTF-8-S Napshot-policy default-is-repository false-ipspace Default

2.2 Enabling the NFS protocol on the SVM

>vserver NFS Create-vserver nfs-access true-v4.1 enabled

2.3 Creating a Broadcast domain

>broadcast-domain create-broadcast-domain 192.168.10.1/24-mtu 1500-ipspace default-ports NetApp-01:e0a,NetApp-02 : e0a

2.4 Creating a logical Interface (LIF)

>network interface Create-vserver nfs-lif nfs_nfs_lif-role data-home-node netapp-01-home-port e0a-address 192.168 .10.241-netmask 255.255.255.0

2.5 SVM Export policy configuration 2.5.1 SVM Root volume Create export policy

>vserver export-policy create-vserver nfs-policyname Nfs_rootpol

2.5.2 creating export policy rules for the SVM root volume

>export-policy rule create-vserver nfs-policyname nfs_rootpol-protocol nfs4-clientmatch 0.0.0.0/0-rorule KRB5-RWR Ule Never-anon 0-superuser krb5--ruleindex 1

2.5.3 linking a root volume to an export policy

>vol modify-vserver nfs-volume Nfs_root-policy Nfs_rootpol

2.6 SVM Kerberos Configuration 2.6.1 enable des encryption for SVM

>nfs Modify-vserver nfs-permitted-enc-types Des,des3

2.6.2 SVM Configuration DNS

>dns create-vserver nfs-domains ipshare.top-name-servers 192.168.10.240-state enabled

2.6.3 Creating the Kerberos Realm

>kerberos Realm Create-realm Ipshare.top-kdc-vendor microsoft-kdc-ip 192.168.10.240-kdc-port 88-clock-skew 5-ADMI Nserver-ip 192.168.10.240-adminserver-port 749-passwordserver-ip 192.168.10.240-passwordserver-port 464-vserver NFS -adserver-name Ad-ipshare-adserver-ip 192.168.10.240

2.6.4 enable Kerberos on the Lif

Kerberos interface Enable-vsever Nfs-lif nfs_nfs_lif-spn

Nfs/nfs_nfs_lif @ipshare. Top-admin-username nfsadmin

3 Enable DES in AD

The LIF and NFS clients created will be displayed under Active Directory Users and Computers

Go to Properties-> Property Editor and edit Msds-supportedencryptiontypes to 0x3 (encryption type supported for 0x3 des_cbc_crc| DES_CBC_MD5)

4 Vmware ESXi Configuration

Create Vmkernel and configure IP addresses

Configuring DNS in ESXi

Configure Network Time Protocol (NTP)

Mount a volume to ESXi

>ESXCLI storage nfs41 add-h 192.168.10.241-v nfs-s/vol01-a sec_krb5

VMware mounts shared storage----NFS v4.1