FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
alaxkar
Staff
Staff
Article Id 352121
Description This article describes the steps necessary to configure and troubleshoot NFS (Network File System) from the client side and to mount an NFS directory. The following is the general process for setting up NFS and troubleshooting common issues from the client side.
Scope FortiSIEM.
Solution
  1. On the client machine, install the NFS client software.

 

    yum install nfs-utils

 

 

  1. Mounting the NFS Share. Once the NFS client software is installed, mount the NFS share from the server.mkdir -p /

 

mnt/nfs_share

 

 

Mount the NFS Share.

Use the mount command to mount the NFS directory from the server.

 

mount <server_ip>:/path/to/share /mnt/nfs_share

 

Replace <server_ip> with the IP address or hostname of the NFS server.

Replace /path/to/share with the directory exported by the NFS server.

 

  1. Verify the Mount.
Check that the NFS share is mounted correctly by using the df or mount command.

 

 

df -h /mnt/nfs_share

mount | grep nfs

 

 

  1. Permanent Mount (Optional).
To automatically mount the NFS share on boot, add an entry to /etc/fstab.

 

Open /etc/fstab with an editor:

 

vim /etc/fstab

<server_ip>:/path/to/share /mnt/nfs_share nfs defaults 0 0

 

 

  1. Troubleshooting NFS Mounts. If issues are encountered while mounting the NFS share, consider the following common troubleshooting steps:

 

  1. Check NFS Server Availability. Ensure that the NFS server is running:

 

sudo systemctl status nfs-server

 

 

 

 

  1. Make sure that the server can reach the client's IP address and that the client can reach the server.

 

Check Firewall Settings. Verify that the necessary ports are open on both the client and server. By default, NFS uses the following ports:

  • TCP 2049 (NFS).
  • TCP 111 (Portmap/RPC).

 

On Linux, check firewall rules with:

 

sudo firewall-cmd --list-all

 

It may be necessary to allow NFS-related traffic through the firewall:


sudo firewall-cmd --zone=public --add-service=nfs --permanent

sudo firewall-cmd --reload

 

Testing with showmount.

 

Use the showmount command to verify what the NFS server is exporting:

 

showmount -e <server_ip>

 

Contributors