Unsolved
1 Rookie
•
5 Posts
0
196
disable smb1 instructions
Just installed v9.5.0.8. Running the latest IOCA, has a comment to consider disabling SMB1 and lists the Security Configuration guide (https://dl.dell.com/content/manual60210976). On page 39 are the disable instructions. Since we have an existing cluster, I intend to follow step 3. but I an a bit confused by step 3c, which states "restart the smb service". But I do not see a step to disable the service. Do I assume the command in 3b to disable SMB1 will disable the SMB service? Does the SMB service need to be stopped prior to 3b? I would like to know if the entire SMB service is going down then that is customer affecting and affects when this change can be performed.
storageSysAdmin
1 Rookie
1 Rookie
•
52 Posts
0
May 24th, 2024 09:29
I have just seen the alerts from CloudIQ that they recommend to disable smbv1
i think restarting the smb service will be disruptive for all smbv1-2-3 clients, however if you dont do it it might just be that no additional smbv1 connections will be negotiated, so slowly over time they will all drop off? but would need to test that on a simulator.
Ryan_CSULB
1 Rookie
1 Rookie
•
64 Posts
0
June 3rd, 2024 18:11
I came to ask this as well. The documentation noted by the OP suggests that only SMB1 connections are affected by restarting the SMB service but I can't believe that is correct:
"This step disconnects any current SMB1 clients and updates the configuration to prevent new SMB1 connections."
I mean, it *could* be correct if you didn't have/care about your v2 and v3 connections but I kind of do have/care... :)
I am also thinking of just running the command to disable the v1 and was hoping the next firmware install that forces a reboot will take care of the restarting part so I can schedule the potential disruption all together but I don't know for certain if that will work.
Phil.Lam
3 Apprentice
3 Apprentice
•
592 Posts
0
June 17th, 2024 15:27
@rgmule05,
disable enable smb service by
isi services -a smb disable
isi services -a smb enable
Phil.Lam
3 Apprentice
3 Apprentice
•
592 Posts
0
June 17th, 2024 15:28
@Ryan_CSULB ,
You need a maintenance period to disable SMB1 is best.