ONTAP Discussions
ONTAP Discussions
Because the custumor's network environment exists two-way firewall. We've opened these ports 111,2049,635,4045,4046,4049 in nfs server (ontap) side. when we opened more than 700 port number in the nfs client side, nfs volume can be mounted normally. We'd like to know what is the exact port number range that nfs client side needs to mount nfsv3 volume
we opened more than 700 port number by using the following command:
R1(config)#access-list 110 permit tcp any any gt 700
nfs client's session information(nfs client 192.168.10.105, ontap:192.168.2.156):
Solved! See The Solution
Hello,
I studied the issue these days, and found the range of nfs client-side's ports were divided into two parts, one was privilege port (less than 1024), the other was non-privilege port(more than 1024 random port).
privilege port number can be configured by add the two variables("sunrpc.min_resvport" & "sunrpc.max_resvport") into /etc/sysctl.conf (refer to https://access.redhat.com/solutions/1614383).
non-privilege port number can be configured by adding the variable of "net.ipv4.ip_local_port_range" into /etc/sysctl.conf
/etc/sysctl.conf file content as follow:
finally, thank you for your information
Hello hmouhara,
Thank you for your reply, I read the post you provided above. the post instructs the detail port number that is needed in the NFS server-side. But we don't know which port number range need to be opened in the NFS client-side. port number that is used in the NFS client-side seems to be randomly assigned. whether do these random port numbers have the exact the range? Are these random port number defined by nfs client OS or by Ontap system?
(nfs client ipadd: 192.168.10.105, Ontap nfs lif ipadd:192.168.2.156):
Hello,
I studied the issue these days, and found the range of nfs client-side's ports were divided into two parts, one was privilege port (less than 1024), the other was non-privilege port(more than 1024 random port).
privilege port number can be configured by add the two variables("sunrpc.min_resvport" & "sunrpc.max_resvport") into /etc/sysctl.conf (refer to https://access.redhat.com/solutions/1614383).
non-privilege port number can be configured by adding the variable of "net.ipv4.ip_local_port_range" into /etc/sysctl.conf
/etc/sysctl.conf file content as follow:
finally, thank you for your information