在ONTAP 9 6及更高版本中使用自定义密码套件的集群上建立集群对等关系失败
适用场景
- ONTAP 9.6及更高版本
- 对于ONTAP 9.5RC1至9.5P2 (含)、请转到此处
- 集群对等
- 密码
- MetroCluster 配置
问题描述
- 尝试创建 集群对等方失败、 并显示以下错误消息：
Error: command failed: Using peer-address XX.XXX.XX.X: An introductory RPC to the peer address "XX.XX.XX.XX" failed to connect: RPC: Remote system error [from mgwd on node "XXXXXXXXX" (VSID: -1) to xcintro at XX.XX.XX.XX]. Verify that the peer address is correct and try again.
- 在升级到本知识库文章适用场景部分提及的某个版本后、现有集群对等关系也可能会出现这些错误。
- 在双节点MetroCluster系统中、ONTAP升级后切回失败、并显示以下错误：
Cluster_A1::*> metrocluster switchback -simulate
Error: command failed: Failed to retrieve system image status information for all
nodes. Reason: Failed to contact peer cluster "Cluster_B1" at addresses:
10.XX.XX.3, 10.XX.XX.4. RPC: Remote system error [from mgwd on node
"Node_A1" (VSID: -1) to mgwd at 10.XX.XX.3, 10.XX.XX.4]. Verify that the
nodes are healthy using the "cluster show" command and that cluster peering
is available using the "cluster peer show" command, then retry the
operation.
- /etc/log/mllog/mgwd.log中的MWD日志消息 会报告 有关缺少预共享密钥(PSK)密码套件的错误消息。
[kern_mgwd:info:1668] 0x81b004200: 0: ERR: mgwdmain: set_xc_dsmdb_rpc_services: called
[kern_mgwd:info:1668] 0x81b004200: 0: NOTICE: RpcConnectionCache: SetUpSslOps: Set up SSL ops.
[kern_mgwd:info:1668] 0x81b004200: 0: ERR: RpcConnectionCache: getXcContext: Could not find any PSK cipher suites (0).
[kern_mgwd:info:1668] 0x81b004200: 0: ERR: RpcConnectionCache: SetUpTlsConnections: Could not get a client SSL context.
InterclusterBrokenConnectionAlert可能会在运行状况监控中报告。cluster peer show输出将 远程集群的可用性报告为Unavailable.cluster peer health show为空：
::> cluster peer health show
This table is currently empty
- 端口11104无响应：
::*> system node systemshell -node Node_A1 nc -zv 10.XX.XX.3 11104
nc: connect to 10.XX.XX.3 port 11104 (tcp) failed: Connection refused