メインコンテンツへスキップ

IKEコールにクライアントが応答しないため、NFSクライアントから「NFS not responding」エラーが報告される

Views:
10
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas<a>2009742067</a>
Last Updated:

環境

  • ONTAP 9
  • NFS over IPsec
  • Microsoft

問題

  • NFS not responding IKEコールにクライアントが応答しないため、NFSクライアントから""エラーが報告されています。
  • Charon ログに従って、IPsec接続は確立されましたが、クライアントがIKEコールに応答しなかったため、タイムアウトしました。

    Sep  8 05:38:15.951 25[IKE] CHILD_SA beumien1svm01:beu_mien1_net{6493} established with SPIs cd79c1b7_i c26d127d_o and TS 10.230.6.xx/32[tcp/sunrpc] 10.230.6.xx/32[tcp/rlzdbase] 10.230.6.xx/32[tcp/nfsd] 10.230.6.xx/32[tcp/lockd] 10.230.6.xx/32[tcp/4046] 10.230.6.xx/32[tcp/10000-65535] === 10.230.25.xx/32
    Sep  8 05:38:16.630 25[ENC] generating IKE_AUTH response 1 [ IDr AUTH N(USE_TRANSP) N(ESP_TFC_PAD_N) SA TSi TSr ] 10.230.6.xx[4500] <==> 10.230.25.xx[4500]
    Sep  8 05:38:16.764 30[NET] process_message_job.c: Fast recovery logic, looking for peer configs matching 10.230.6.xx[4500] to 10.230.25.xx[4500] for any identity
    Sep  8 05:38:18.741 04[NET] socket_default_socket.c: send_msg_v4 sent 312 bytes from 10.230.6.xx[500] to 10.230.25.xx[500] in vserver 8
    Sep  8 05:38:23.169 04[NET] socket_default_socket.c: send_msg_v4 sent 312 bytes from 10.230.6.xx[500] to 10.230.25.xx[500] in vserver 8
    Sep  8 05:38:23.976 18[IKE] retransmit 3 of request with message ID 0 10.230.6.xx[500] <==> 10.230.25.xx[500]
    Sep  8 05:38:24.208 19[ENC] parsed IKE_AUTH request 1 [ IDi CERTREQ IDr AUTH N(USE_TRANSP) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ] 10.230.25.xx[4500] <==> 10.230.6.xx[4500]
    Sep  8 05:38:24.277 19[IKE] received retransmit of request with ID 1 10.230.25.xx[4500] <==> 10.230.6.xx[4500] retransmitting response

  • それを投稿すると、クライアントは5:38 IST頃に再び応答を開始しました。

    Sep  8 05:38:41.991 32[IKE] CHILD_SA beumien1svm01:beu_mien1_net{6540} established with SPIs c146f17a_i c3f954b6_o and TS 10.230.6.xx/32[tcp/sunrpc] 10.230.6.xx/32[tcp/rlzdbase] 10.230.6.xx/32[tcp/nfsd] 10.230.6.xx/32[tcp/lockd] 10.230.6.xx/32[tcp/4046] 10.230.6.xx/32[tcp/10000-65535] === 10.230.25.xx/32

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.