Enable NFS and SMB on a storage VM.
1. For new storage VMs: click Storage > Storage VMs, click Add, enter a storage VM name, and in the SMB/CIFS, NFS, S3 tab, select Enable SMB/CIFS and Enable NFS.
2. Enter the following information:
  - Administrator name and password
  - Server name
  - Active directory domain
3. Confirm the Organizational Unit.
4. Confirm the DNS values.
5. Confirm the default language.
6. Add network interfaces.
7. Update storage VM administrator account information (optional).
8. For existing storage VMs: click Storage > Storage VMs, select a storage VM, and then click Settings. Complete the following sub-steps if NFS or SMB is not already enabled.
  - Click under NFS.
  - Click under SMB.
Open the export policy of the storage VM root volume:
1. Click Storage > Volumes, select the root volume of the storage VM (which by default is volume-name_root), and then click on the policy that is displayed under Export Policy.
2. Click Add to add a rule.
  - Client specification = 0.0.0.0/0
  - Access protocols = NFS
  - Access details = NFS Read-Only
Configure DNS for host-name resolution:
1. Click Storage > Storage VMs, select the storage VM, click Settings, and then click under DNS.
2. When DNS configuration is complete, switch to the DNS server and map the SMB server.
  - Create forward (A - Address record) and reverse (PTR - Pointer record) lookup entries to map the SMB server name to the IP address of the data network interface.
  - If you use NetBIOS aliases, create an alias canonical name (CNAME resource record) lookup entry to map each alias to the IP address of the SMB server’s data network interface.
Configure name services as required:
1. Click Storage > Storage VMs, select the storage VM, click Settings, and then click for LDAP or NIS.
2. Include any changes in the name services switch file: click under Name Services Switch.
Configure authentication and encryption if required:
Configure TLS for NFS clients
NFS over TLS is available in ONTAP 9.15.1 as a public preview. As a preview offering, NFS over TLS is not supported for production workloads in ONTAP 9.15.1.

Steps

Refer to the requirements for NFS over TLS before you begin.

Click Storage > Storage VMs, select the storage VM, and then click Settings.

In the NFS tile, click NFS over TLS settings.

In the NFS over TLS settings area, select an NFS network interface for which you want to enable TLS.

Click the for that interface.

Click Enable.

In the Network interface TLS configuration dialog, include a certificate for use with TLS by selecting one of the following options:

Installed certificate: Choose a previously installed certificate from the drop-down list.

New certificate: Choose a common name for the certificate.

External CA-signed certificate: Follow the instructions to paste the contents of your certificate and private key into the boxes.

Click Save.
Configure Kerberos
Steps

Click Storage > Storage VMs, select the storage VM, and then click Settings.

Click in the Kerberos tile and then click Add.
Map UNIX and Windows user names if required: click under Name Mapping and then click Add.

You should do this only if your site has Windows and UNIX user accounts that do not map implicitly, which is when the lowercase version of each Windows user name matches the UNIX user name. You can map user names using LDAP, NIS, or local users. If you have two sets of users that do not match, you should configure name mapping.