IPSEC NFS mounts appear to hang after 30 minutes
Applies to
- ONTAP 9
- NFS
- IPSEC
Issue
- NFS shares mounted on clients over IPSEC tunnel work normally for 30 minutes then stop, appearing to hang. Restarting IPSEC on the client resolves the problem which reoccurs in 30 minutes.
- Charon logs show IKE_SA being deleted:
Jan 26 12:24:50.771 06[JOB] deleting IKE_SA after 1800 seconds of CHILD_SA inactivity
Jan 26 12:24:50.771 06[IKE] deleting IKE_SA vserver:allow_nfs[1] between 10.10.10.10[C=US]...10.10.10.11[C=US]