Cluster Switch not reachable externally but the switch health is good
Applies to
- ONTAP 9
- FAS/AFF/ASA
- Cluster Network Switch
Issue
- The cluster network switch is not reachable from external management networks.
- The switch is monitored and healthy from within the ONTAP cluster, but cannot be accessed via ping or SSH from outside the cluster.
- The behavior can be confirmed with the following command:
Cluster::* > system cluster-switch showSwitch Type Address Model--------------------------------------------------------------Switch1 cluster-network 10.xxx.x.xx N9K-C9336C-FX2Switch2 cluster-network 10.xxx.x.xx N9K-C9336C-FX22 entries were displayed.
- Ping tests from ONTAP node management LIFs to the switch management IPs are successful:
Cluster::* > net ping -vserver svm1 -lif lif_mgmt1 -destination 10.xxx.x.xx10.xxx.x.xx is alive
Cluster::* > net ping -vserver svm1 -lif lif_mgmt1 -destination 10.xxx.x.xx10.xxx.x.xx is alive
However, attempts to access the switch via SSH or ping from external sources (outside the cluster management network) fail.
