diff --git a/group_vars/nas.yml b/group_vars/nas.yml
index 510c3c2..06915b1 100644
--- a/group_vars/nas.yml
+++ b/group_vars/nas.yml
@@ -7,3 +7,4 @@ datadisks:
 
 firewall_in:
   - {proto: tcp, port: 22, from: [172.20.20.0/22]}
+  - {proto: tcp, port: 2049, from: [172.20.20.0/22]}