How to test and verify NFS connectivity when there are intermittent NFS mounted errors
18284
Created On 11/01/19 00:18 AM - Last Modified 11/18/20 02:22 AM
Objective
The objective of this article is to test and verify NFS connectivity from Palo Alto Firewall when intermittent NFS mounted errors are seen.
Environment
- PAN-OS 7.1 and above.
- Any Panorama.
Procedure
- Check System log for NFS mount errors using GUI: Monitor > Logs> System. Use the filter "description contains NFS mounted" to filter NFS mount issues.
- Check what directories have NFS mount. Identify server and the NFS mount path as seen below.
Panorama(primary-active)> show system disk-space
Filesystem Size Used Avail Use% Mounted on
/dev/sda3 7.9G 3.1G 4.5G 41% /
/dev/sda5 24G 11G 12G 49% /opt/pancfg
/dev/sda6 6.0G 1.4G 4.3G 25% /opt/panrepo
tmpfs 2.0G 110M 1.9G 6% /dev/shm
cgroup_root 2.0G 0 2.0G 0% /cgroup
/dev/sda8 585G 433G 153G 74% /opt/panlogs
server_ha2n2_nfs:/server_t2_panorama_logs_vol/server_t2_panorama_logs_qt <<NFS mount
585G 433G 153G 74% /mnt/dynamic-logs
In the above example. NFS Server is server_ha2n2_nfs and the mount point is /server_t2_panorama_logs_vol/server_t2_panorama_logs_qt.
- Check if the NFS mount has any failure errors.
Panorama(primary-active)> show system nfs dynamic-logging-partition failures
No failures so far
- Test NFS mount
Panorama(primary-active)> test nfs dynamic-logging-partition server server_ha2n2_nfs logdirectory /server_t2_panorama_logs_vol/server_t2_panorama_logs_qt
Test results : All tests passed.
- If the errors are seen in step 3 or the test results fail on step 4, then the NFS mount needs to be troubleshot for disk errors or connectivity. Follow the troubleshooting steps by the NFS Server Vendor. In the above example, it is server_ha2n2_nfs.
Additional Information
How to Mount an NFS Volume
Panorama NFS Errors