{"id":19432,"date":"2017-02-16T06:49:54","date_gmt":"2017-02-15T22:49:54","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/02\/16\/centos-7-x-nfs-server-%e7%9a%84%e9%98%b2%e7%81%ab%e7%89%86%e8%a8%ad%e5%ae%9a\/"},"modified":"2021-03-18T17:24:56","modified_gmt":"2021-03-18T09:24:56","slug":"centos-7-x-nfs-server-%e7%9a%84%e9%98%b2%e7%81%ab%e7%89%86%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/02\/16\/centos-7-x-nfs-server-%e7%9a%84%e9%98%b2%e7%81%ab%e7%89%86%e8%a8%ad%e5%ae%9a\/","title":{"rendered":"CentOS 7.x NFS Server \u7684\u9632\u706b\u7246\u8a2d\u5b9a"},"content":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a
\u9ce5\u54e5\u7684 Linux \u79c1\u623f\u83dc — NFS \u4f3a\u670d\u5668<\/a>
CentOS 7 NFS\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef\u8bbe\u7f6e – \u963f\u6cf0\u7684\u83dc\u56ed<\/a>
How to setup NFS Server on CentOS 7 \/ RHEL 7 \/ Fedora 22<\/a>
NFS issue Behind iptables in Centos 7 – Server Fault<\/a><\/p>\n

# \/usr\/sbin\/<\/span>rpcinfo -p<\/span>
\u00a0\u00a0 program vers proto\u00a0\u00a0 port\u00a0 service<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 2\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 2\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper<\/span>
\u00a0\u00a0\u00a0 100024\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0 33438\u00a0 status<\/span>
\u00a0\u00a0\u00a0 100024\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0 45447\u00a0 status<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 2\u00a0\u00a0 udp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 2\u00a0\u00a0 tcp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0 1002\u00a0 mountd<\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs<\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs<\/span>
\u00a0\u00a0\u00a0 100227\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs_acl<\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs<\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs<\/span>
\u00a0\u00a0\u00a0 100227\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs_acl<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0 58234\u00a0 nlockmgr<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0 58234\u00a0 nlockmgr<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0 58234\u00a0 nlockmgr<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0 33450\u00a0 nlockmgr<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0 33450\u00a0 nlockmgr<\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0 33450\u00a0 nlockmgr<\/span><\/p>\n

\u7a0d\u5fae\u6574\u7406\u4e00\u4e0b\uff0c\u5176\u4e2d tcp\/udp 111<\/span> \u53ca tcp\/udp 2049<\/span> \u662f\u56fa\u5b9a\u7684\uff0c\u5176\u5b83\u5247\u6703\u8b8a\u52d5
# \/usr\/sbin\/rpcinfo -p | awk ‘{print $3,$4,$5}’ | sort | uniq<\/span>
proto port service<\/span>
tcp 111 portmapper<\/span>
tcp 2049 nfs<\/span>
tcp 2049 nfs_acl<\/span>
tcp <\/span>33450<\/span> nlockmgr<\/span>
tcp <\/span>45447<\/span> status<\/span>
tcp <\/span>1002<\/span> mountd<\/span>
udp 111 portmapper<\/span>
udp 2049 nfs<\/span>
udp 2049 nfs_acl<\/span>
udp <\/span>58234<\/span> nlockmgr<\/span>
udp <\/span>33438<\/span> status<\/span>
udp <\/span>1002<\/span> mountd<\/span><\/p>\n

[@more@]\u4f7f\u7528 firewalld \u9632\u706b\u7246
# <\/span>\/usr\/bin\/firewall-cmd –permanent –zone public –add-service mountd<\/span>
#<\/span> \/usr\/bin\/firewall-cmd –permanent –zone public –add-service rpc-bind<\/span>
#<\/span> <\/span>\/usr\/bin\/firewall-cmd –permanent –zone public –add-service nfs<\/span>
#<\/span> <\/span>\/usr\/bin\/firewall-cmd –reload<\/span><\/p>\n

\u4e0d\u904e\u500b\u4eba\u6bd4\u8f03\u7fd2\u6163\u4f7f\u7528\u539f\u6709\u7684 iptables \u9632\u706b\u7246\uff0c\u6240\u4ee5\u5e95\u4e0b\u6539\u7528\u56fa\u5b9a NFS Server Port\u00a0 \u7684\u65b9\u5f0f\u8655\u7406<\/p>\n

\u5099\u4efd\u539f\u6a94 \/etc\/sysconfig\/nfs<\/span>
# cp \/etc\/sysconfig\/nfs \/etc\/sysconfig\/nfs.$(date +%F)<\/span><\/p>\n

\u4fee\u6539\u8a2d\u5b9a\u6a94 \/etc\/sysconfig\/nfs<\/span>
# grep PORT \/etc\/sysconfig\/nfs<\/span>
LOCKD_TCPPORT=32803<\/span>
LOCKD_UDPPORT=32769<\/span>
MOUNTD_PORT=892<\/span>
STATD_PORT=662<\/span>
STATD_OUTGOING_PORT=2020<\/span><\/p>\n

\u91cd\u65b0\u555f\u52d5 NFS Server
# systemctl restart nfs-server<\/span><\/p>\n

\u5982\u679c nlockmgr Port \u9084\u662f\u7121\u6cd5\u56fa\u5b9a\uff0c\u5247\u8981\u4fee\u6539 \/etc\/sysctl.conf<\/span>
# cp \/etc\/sysctl.conf \/etc\/sysctl.conf.$(date +%F)<\/span>
\u52a0\u5165\u4e0b\u9762\u4e8c\u884c
fs.nfs.nlm_tcpport=32803<\/span>
fs.nfs.nlm_udpport=32769<\/span>
# sed -i ‘$a fs.nfs.nlm_tcpport=32803nfs.nfs.nlm_udpport=32769’ \/etc\/sysctl.conf<\/span><\/p>\n

\u8b93\u8a2d\u5b9a\u751f\u6548
# sysctl -p<\/span><\/p>\n

\u518d\u6b21\u6aa2\u67e5\u6240\u4f7f\u7528\u7684 Port \u662f\u5426\u6709\u56fa\u5b9a
# \/usr\/sbin\/rpcinfo -p<\/span>
\u00a0\u00a0 program vers proto\u00a0\u00a0 port\u00a0 service <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 2\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100000\u00a0\u00a0\u00a0 2\u00a0\u00a0 udp\u00a0\u00a0\u00a0 111\u00a0 portmapper <\/span>
\u00a0\u00a0\u00a0 100024\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0\u00a0\u00a0 662\u00a0 status <\/span>
\u00a0\u00a0\u00a0 100024\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 662\u00a0 status <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 2\u00a0\u00a0 udp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 2\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100005\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0\u00a0 892\u00a0 mountd <\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs <\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs <\/span>
\u00a0\u00a0\u00a0 100227\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0\u00a0 2049\u00a0 nfs_acl <\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs <\/span>
\u00a0\u00a0\u00a0 100003\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs <\/span>
\u00a0\u00a0\u00a0 100227\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0\u00a0 2049\u00a0 nfs_acl <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 1\u00a0\u00a0 udp\u00a0 32769\u00a0 nlockmgr <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 3\u00a0\u00a0 udp\u00a0 32769\u00a0 nlockmgr <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 4\u00a0\u00a0 udp\u00a0 32769\u00a0 nlockmgr <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 1\u00a0\u00a0 tcp\u00a0 32803\u00a0 nlockmgr <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 3\u00a0\u00a0 tcp\u00a0 32803\u00a0 nlockmgr <\/span>
\u00a0\u00a0\u00a0 100021\u00a0\u00a0\u00a0 4\u00a0\u00a0 tcp\u00a0 32803\u00a0 nlockmgr<\/span><\/p>\n

# \/usr\/sbin\/rpcinfo -p | awk ‘{print $3,$4,$5}’ | sort | uniq<\/span>
proto port service<\/span>
tcp 111 portmapper<\/span>
tcp 2049 nfs<\/span>
tcp 2049 nfs_acl<\/span>
tcp 32803 nlockmgr<\/span>
tcp 662 status<\/span>
tcp 892 mountd<\/span>
udp 111 portmapper<\/span>
udp 2049 nfs<\/span>
udp 2049 nfs_acl<\/span>
udp 32769 nlockmgr<\/span>
udp 662 status<\/span>
udp 892 mountd<\/span><\/p>\n

\u4f7f\u7528 firewalld \u9632\u706b\u7246
# \/usr\/bin\/firewall-cmd –permanent –add-port=111\/tcp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=111\/udp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=662\/tcp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=662\/udp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=892\/tcp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=892\/udp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=2049\/tcp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=2049\/udp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=32803\/tcp<\/span>
# \/usr\/bin\/firewall-cmd –permanent –add-port=32769\/udp<\/span><\/span><\/span><\/span>
#<\/span> <\/span>\/usr\/bin\/firewall-cmd –reload<\/p>\n

<\/span>\u4f7f\u7528 iptables \u9632\u706b\u7246
# \/usr\/sbin\/iptables -A INPUT -i eth0 -p tcp -s 192.168.1.0\/24 -m multiport –dport 111,2049,662,892,32803 -j ACCEPT<\/span>
# \/usr\/sbin\/iptables -A INPUT -i eth0 -p udp -s 192.168.1.0\/24 -m multiport –dport 111,2049,662,892,32769 -j ACCEPT<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u53c3\u8003\u7db2\u7ad9\uff1a \u9ce5\u54e5\u7684 Linux \u79c1\u623f\u83dc — NFS \u4f3a\u670d\u5668 CentOS 7 NFS\u670d\u52a1\u5668\u548c\u5ba2\u6237\u7aef … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008CentOS 7.x NFS Server \u7684\u9632\u706b\u7246\u8a2d\u5b9a\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117,138,128],"tags":[],"class_list":["post-19432","post","type-post","status-publish","format-standard","hentry","category-c-78462","category-c-78483","category-c-78473"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["682711"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19432"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19432"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19432\/revisions"}],"predecessor-version":[{"id":20963,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19432\/revisions\/20963"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}