FPolicy服务器无法连接到ONTAP节点、因为https服务不属于分配给LIF的网络服务策略

适用场景

• ONTAP 9
• FPolicy

问题描述

• FPolicy服务器 无法连接到ONTAP节点
  • FPolicy 可能看起来已连接、但无法完全建立连接

示例：

::> fpolicy show-engine -vserver SVM01 (vserver fpolicy show-engine) FPolicy Server Server Vserver Policy Name Node Server Status Type ------- ------------- ------------ ----------------- -------------- ----------- svm1 disconnected primary Varonis cluster01- 10.11.12.14 01 svm1 disconnected primary Varonis cluster01- 10.11.12.14 02

• EMS错误

示例：

[node01: fpolicy: fpolicy.server.connectError:error]: Node failed to establish a connection with the FPolicy server "10.11.12.14" of policy "Varonis" for Vserver svm1 (reason: "Connection to FPolicy server is broken(EPIPE) received.").

• 用于Fpolicy流量的LIF的service-policy 不具有 management-https 服务：

示例

::> network interface show -vserver svm1 -instance

            Vserver Name: svm1
       Logical Interface Name: svm1_cifs_nfs_lif1
           Service Policy: custom-data-49642
            Service List: data-core, data-nfs, data-cifs,
                   data-fpolicy-client, management-dns-client,
                   management-ad-client,
                   management-ldap-client,
                   management-nis-client, data-dns-server