Secure NFS setup queries

LYC · 08-20-2015, 08:05 PM

Hi,

We have Solaris servers running secure NFS for both server and client as follows:
Server:
share -F nfs -o ro=<nfs server>:<nfs server> /<export folder>

Client:
ssh -fN -L "3049:<nfs server>:2049" <login name>@<nfs server>
mount -o port=3049 nfs://localhost/<folder> /<folder>

How to implement the above in linux?

Thanks in advance.

jpollard · 08-22-2015, 05:49 AM

Wouldn't it be simpler to use sshfs?

https://help.ubuntu.com/community/SSHFS

ferrari · 08-22-2015, 06:12 AM

Are you using NFS v3 or v4?

No problems doing this in Linux, although I agree that using sshfs would be less convoluted. (Make sure that you have port forwarding enabled in your ssh server though.)

https://blogs.oracle.com/shepler/ent...raffic_via_ssh
https://gist.github.com/proudlygeek/5721498

LYC · 08-22-2015, 11:02 PM

Hi ferrari,

Correct me that the firewall ports need to be opened between the server and client are as follows?

(1) 3049 TCP (both way)
(2) 2049 UDP (both way)
(3) 22 TCP (both way)

ferrari · 08-23-2015, 12:24 AM

The whole idea of the SSH tunnel is that only SSH port on the server needs to be open. We're using local port forwarding here.