来自集群间LIF的欺骗警报

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

ONTAP 9
防火墙警报

问题描述

未知IP地址报告了以下错误：

[Node_A1: kernel: csm.connectionFailed:debug]: CSM failed to create a connection: localBladeUUID = xxxxx:dblade, remoteBladeUUID = xxxxxx:dblade, uniquifier = 0e05e9bf38812f41, transportType = CT,localVifId = 1026, remoteVifIP = xx.xx.xx.xx, CsmError = CSM_CONNTIMEOUT, ctLoError = CTLOPCP_ERR_UNKNOWN, socketError = 60, and TLSerror = 0.

cluster peer ping 显示不可访问的地址：

示例

::> cluster peer ping -originating-node xxxx -destination-cluster xxxx Node: xxxxx Destination Cluster: xxx Destination Node IP Address Count TTL RTT(ms) Status ---------------- ---------------- ----- ---- ------- ------------------------- Node_B1 <Known IP> 1 64 33.774 interface_reachable Node_B1 <Unknown IP> 1 - - unreachable Node_B2 <Known IP> 1 64 33.807 interface_reachable Node_B2 <Unknown IP> 1 - - unreachable

cluster peer show -instance 显示未使用/未知的IP地址：

示例：

::> cluster peer show -cluster Node_B

Peer Cluster Name: Node_B Remote Intercluster Addresses: 10.61.66.52, 10.61.66.53 Availability of the Remote Cluster: Available Remote Cluster Name: Cluster_B Active IP Addresses: 10.61.66.53, 10.61.66.52, 1.1.1.1, 1.2.2.2 Cluster Serial Number: 1-80-000012 Remote Cluster Nodes: Node_B1, Node_B2

外部防火墙可以将其检测为"spoof logs"