Issue During takeover and giveback events, Charon, used by IPsec, has been found to be slow in processing new negotiations. ONTAP uses the [sudo ipsec statusall] command, which dumps all SA informatio...Issue During takeover and giveback events, Charon, used by IPsec, has been found to be slow in processing new negotiations. ONTAP uses the [sudo ipsec statusall] command, which dumps all SA information, to rebuild IPsec and IKE SA tables. ONTAP rebuilds the IPsec SA and IKE SA tables too frequently which impacts Charon performance, especially during takeover and giveback.
