无法创建集群对等关系

最后更新
另存为PDF

Views:: 58

Visibility:: Public

Votes:: 0

Category:: snapmirror

Specialty:: dp

Last Updated:

适用于

ONTAP 9.6+
集群对等
预共享密钥（PSK）密码套件

问题

Cluster Peering 已停止工作，删除弱密码套件后，所有新配置尝试均失败。

警告发生在 EMS logs:

Wed Apr 12 11:14:23 +0100 [node-01: mgwd: cpeer.psk.disabled:notice]: The system was unable to find a suitable pre-shared key (PSK) cipher suite required for cluster peering. This is likely because the PSK cipher suites are disabled in the ONTAP security configuration. Cluster peering connections and associated applications may fail as a result.

尝试创建集群对等体失败，并显示以下错误消息：

Error: command failed: Using peer-address XX.XXX.XX.X: An introductory RPC to the peer address "XX.XX.XX.XX" failed to connect: RPC: Remote system error [from mgwd on node "XXXXXXXXX" (VSID: -1) to xcintro at XX.XX.XX.XX]. Verify that the peer address is correct and try again

/etc/log/mlog/mgwd.log 中的 MGWD 日志消息报告有关缺少预共享密钥 (PSK) 密码套件的错误消息。

Mon Jul 13 2020 12:58:30 +05:30 [kern_mgwd:info:1668] 0x81b004200: 0: ERR: mgwdmain: set_xc_dsmdb_rpc_services: called Mon Jul 13 2020 12:58:30 +05:30 [kern_mgwd:info:1668] 0x81b004200: 0: NOTICE: RpcConnectionCache: SetUpSslOps: Set up SSL ops. Mon Jul 13 2020 12:58:30 +05:30 [kern_mgwd:info:1668] 0x81b004200: 0: ERR: RpcConnectionCache: getXcContext: Could not find any PSK cipher suites (0). Mon Jul 13 2020 12:58:30 +05:30 [kern_mgwd:info:1668] 0x81b004200: 0: ERR: RpcConnectionCache: SetUpTlsConnections: Could not get a client SSL context.

Cluster peer show 输出将远程集群的可用性报告为 Unavailable。
- Cluster peer health show 为空：
  ::> cluster peer health show
  This table is currently empty

当集群中缺少所需的密码时，它将停止在 tcp 端口 11104 上侦听
- 端口 11104 上无响应：
  ::*> system node systemshell -node Node_A1 nc -zv 10.XX.XX.3 11104
  nc: connect to 10.XX.XX.3 port 11104 (tcp) failed: Connection refused.