Network Isolation
-
Dedicated VLAN for NFS storage traffic
-
No routing from storage network to public networks
-
FlashArray export policies scoped to only VME host and manager IPs
NFS Security Options
On FlashArray, restrict NFS access by scoping export policy rules to only the VME host IPs and VME Manager IP.
Use auth_sys authentication with no-root-squash and rw permissions.