I'm having trouble getting a Solaris 11.0 server to restrict access to an NFS share to a single client system.I have roughly the following value for the share property of a tank/mail ZFS filesystem:name=mail,path=/tank/mail,prot=nfs,none=*,rw=@10.0.23.43,sec=sysI cannot mount the share on the client (running Solaris 11.3) at 10.0.23.43.  I attempt like so:mount -F nfs keisha:/tank/mail /tmp/mntand get the following error:nfs mount: mount: /tmp/mnt: Permission deniedIf I remove none=* then the client mounts fine.  However, it is my understanding that doing so will allow access to clients at any address, which I want to prevent (and yes, I'm aware that it may be possible to spoof the address, but prefer to add whatever hoops I can.)I have tried reversing the order of none and rw, and this changes nothing.  I've tried rw=@10.0.23.43/32 and that doesn't work either.I've tried opening it up to the whole subnet with rw=@10.0.0.0/16 and even that doesn't work.  I've also double-checked that I have the client's address right.  The client can't be using IPv6 to access the server, as the server's DNS entry is only IPv4 and I'm accessing it by name.Why does restricting the client addresses prevent access even from a client at an explicitly allowed address?  How do I fix this?
Restricting NFS clients to particular IP addresses blocks _all_ addresses
solaris;nfs