使用基于IPsec的NFS的NFS客户端挂起、并报告NFS未响应错误
适用场景
- ONTAP 9
- 基于IPsec的NFS
问题描述
- 配置了IPsec的多个NFS客户端挂起、无法访问NFS导出。
- 客户端出现以下错误:
linuxserver# grep -i "nfs: server" /var/log/messages
Nov 3 21:32:52 linuxserver kernel: [2452817.887041] nfs: server nfsserver.domain.local not responding, still trying
Nov 3 21:32:52 linuxserver kernel: nfs: server nfsserver.domain.local not responding, still trying
- ONTAP 端显示两个IPsec连接:
cluster::*> security ipsec show-ikesa -node node1 -vserver svm1 -remote-address 10.1.1.1
Policy Local Remote
Vserver Name Address Address Initator-SPI State
----------- ------ --------------- --------------- ---------------- -----------
svm1 policy1
10.2.2.2 10.1.1.1 862128cb074189a9 ESTABLISHED
10.2.2.2 10.1.1.1 d4e213e48c29809e ESTABLISHED
2 entries were displayed.