PIX and NFS

[jdecroix]

Hello

I need to allow a server on a DMZ to access an other server on the inside network by NFS.

What's the easiest way to do that ?

I wrote something like that but I don't know if it's the best thing to do:

access-list dmz-test_access_in permit udp host X host X eq sunrpc

access-list dmz-test_access_in permit tcp host X host X eq sunrpc

access-list dmz-test_access_in permit udp host X host X range 2049 2049

access-list dmz-test_access_in permit tcp host X host X range 2049 2049

access-list dmz-test_access_in permit udp host X host X range 600 1024

access-list dmz-test_access_in permit tcp host X host X range 600 1024

Thanks a lot.

Jeremie

[didyap]

In an environment where the MTU between the NFS server and client is small, such as a WAN interface, the chain option may require additional tuning. In this case, NFS over TCP is highly recommended to improve efficiency. More information on this is available in the following document.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/relnotes/pixrn601.htm