LAGG Interface and Admin Interface

[shimabuku]

I have successfully setup LACP LAGG on FreeNAS 9.1.1 x64. There are two nics in lagg0, em0 and em1. My onboard nic is alc0 which I would like to use only for the web GUI.

alc0 = 10.0.10.4
lagg0 = 10.0.20.4
default route = 10.0.20.1

How can I prevent users from gaining access to their windows shares via 10.0.10.4? I am able to access the shares by both ip addresses. Is it possible to restrict share access via 10.0.10.4 but still be able to access the web GUI? Also, FreeNAS is connected to a Cisco 3550.

 

[dlavigne]

I think this needs to happen on the Cisco side. Perhaps with a VLAN or firewall rules?

If you were using iscsi, you could create a portal to accomplish this, but that is different than using CIFS shares.

 

[survive]

Hi shimabuku,

I think adding the following to the"Auxiliary parameters" field in the CIFS configwill do what you want:

interfaces = 10.0.20.4/24
bind interfaces only = yes

-Will