NFS mounts timeout when using IPSEC
Applies to
- ONTAP 9
- IPsec
Issue
- Mount requests timeout when clients are using IPsec
- Existing mounts may be ok, but new mounts fail
- Errors, such as the below, can be found in ONTAP charon.log file
Apr 18 11:36:50.380 03[NET] ignoring IKE_SA setup from client, half open IKE_SA count of 1626 exceeds limit of 200
Apr 18 11:36:50.379 03[NET] ignoring IKE_SA setup from client, peer too aggressive