NFS clients using NFS over IPSEC got hung and reporting NFS not responding error
Applies to
- ONTAP 9
- NFS over IPSEC
Issue
- Multiple NFS clients with IPSEC configured got hung and not able to access the NFS exports.
- Below error seen on client side:
linuxserver# grep -i "nfs: server" /var/log/messages
Nov 3 21:32:52 linuxserver kernel: [2452817.887041] nfs: server nfsserver.domain.local not responding, still trying
Nov 3 21:32:52 linuxserver kernel: nfs: server nfsserver.domain.local not responding, still trying
- There are two IPSEC connections showing on Ontap side:
cluster::*> security ipsec show-ikesa -node node1 -vserver svm1 -remote-address 10.1.1.1
Policy Local Remote
Vserver Name Address Address Initator-SPI State
----------- ------ --------------- --------------- ---------------- -----------
svm1 policy1
10.2.2.2 10.1.1.1 862128cb074189a9 ESTABLISHED
10.2.2.2 10.1.1.1 d4e213e48c29809e ESTABLISHED
2 entries were displayed.