NFS over VLANs

FarmerB3d

hi folks,

I am trying to get NFS to work between different VLANS

VLAN1 = Client
VLAN2 = Server

When I have a rule allowing any > any it obviously works. showmount shows the exposed shares
When I have a rule allowing VLAN1 > VLAN2 allow TCP/UPD on 111 and 2049 it does not work (those are the two ports needed)

You can see from the sniff below that it negotiates a higher port and then works when I have the any<>any rule.
How do I set this in a rule in pfSense to allow this?

VLAN1 is untrusted with IoT devices so I don't want any anything :)

Working version with any>any

Non-working version

The rule:

NFSPorts Alias

Should the upper port be auto-negotiated or something like that?

kiokoman

you also need mountd port

under ubuntu it's

sudo nano /etc/default/nfs-kernel-server

RPCMOUNTDOPTS="--port 12345"

sudo systemctl restart nfs-kernel-server
rpcinfo -p | grep "tcp.*mountd"

open port 12345 on pfsense