- Newest
- Most votes
- Most comments
The "mount.nfs: Connection timed out" error you're experiencing when trying to mount your Amazon FSx for NetApp ONTAP file system on your EC2 Linux instance is likely due to a network configuration issue, specifically related to security groups.
To resolve this issue, you should check and adjust the security group settings for both your EC2 instance and the FSx file system:
-
Ensure that the security group associated with your EC2 instance allows outbound traffic on the NFS port (typically port 2049) to the FSx file system.
-
Verify that the security group for your FSx file system has an inbound rule that permits NFS traffic (port 2049) from the security group of your EC2 instance.
Additionally, double-check the following:
-
Confirm that your EC2 instance and the FSx file system are in the same VPC and that the network connectivity between them is properly configured.
-
Verify that you're using the correct mount target IP address or DNS name for your FSx file system.
-
Ensure that your EC2 instance has the necessary NFS client utilities installed.
If you continue to experience issues after checking these settings, you might want to try using the FSx mount helper, which can simplify the mounting process and automatically handle some configuration details.
Remember to use the recommended mount options for optimal performance and reliability, such as:
sudo mount -t nfs -o nfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2,noresvport [file-system-DNS-name]:/[volume-path] [mount-point]
If the problem persists after trying these steps, you may need to review your VPC configuration or contact AWS support for further assistance.
Sources
Troubleshooting mount issues - Amazon Elastic File System
Troubleshooting Amazon FSx for OpenZFS issues - FSx for OpenZFS
Mounting considerations for Linux - Amazon Elastic File System
Use mount.nfs4
or mount -t nfs4
to force NFSv4.
Next thing is to look at open ports, do you have both a security group associated with the EC2 that allows outbound on TCP port 2049 to the FSx, and then a corresponding inbound rule on the FSx security group that allows inbound TCP port 2049 from the EC2?
A full list of all ports that may be required is here https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/limit-access-security-groups.html
Relevant content
- asked 3 years ago
- asked 5 days ago
- AWS OFFICIALUpdated 7 months ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 7 months ago
- AWS OFFICIALUpdated a year ago