Hi,
I have a Management Node on my system that is sending pings to a cluster interface that isn't completing the ping and being directed out to the network infrastructure. I only know about it as its showing in that switch's logs sent to the syslog server.
2020-06-26 11:58:39 Local2.Info B1560-38A-R1R3-MGT1-INT 5880379: Jun 26 16:58:38.357 UTC: %SEC-6-IPACCESSLOGDP: list ACL-TRANSIT-MGMT-IN denied icmp 10.2.21.103 -> 169.254.206.17 (0/0), 19 packets
Its as if it cant hit the 169 cluster ip and being directed out with the zero route.
But if I run some basic ping tests and interface checks the system seems to be ok.
****** Sorry for formatting, attached text document**********
B1560-38A-R1R2-FAS::cluster*> cluster ping-cluster -node B1560-38A-R1R2-FAS-02
Host is B1560-38A-R1R2-FAS-02
Getting addresses from network interface table...
Cluster B1560-38A-R1R2-FAS-01_clus1 169.254.64.107 B1560-38A-R1R2-FAS-01 e0a
Cluster B1560-38A-R1R2-FAS-01_clus2 169.254.74.5 B1560-38A-R1R2-FAS-01 e0b
Cluster B1560-38A-R1R2-FAS-01_clus3 169.254.124.178 B1560-38A-R1R2-FAS-01 e0c
Cluster B1560-38A-R1R2-FAS-01_clus4 169.254.212.103 B1560-38A-R1R2-FAS-01 e0d
Cluster B1560-38A-R1R2-FAS-02_clus1 169.254.56.214 B1560-38A-R1R2-FAS-02 e0a
Cluster B1560-38A-R1R2-FAS-02_clus2 169.254.206.17 B1560-38A-R1R2-FAS-02 e0b
Cluster B1560-38A-R1R2-FAS-02_clus3 169.254.160.224 B1560-38A-R1R2-FAS-02 e0c
Cluster B1560-38A-R1R2-FAS-02_clus4 169.254.233.247 B1560-38A-R1R2-FAS-02 e0d
Local = 169.254.56.214 169.254.206.17 169.254.160.224 169.254.233.247
Remote = 169.254.64.107 169.254.74.5 169.254.124.178 169.254.212.103
Cluster Vserver Id = 4294967293
Ping status:
................
Basic connectivity succeeds on 16 path(s)
Basic connectivity fails on 0 path(s)
................................................................
Detected 9000 byte MTU on 16 path(s):
Local 169.254.160.224 to Remote 169.254.124.178
Local 169.254.160.224 to Remote 169.254.212.103
Local 169.254.160.224 to Remote 169.254.64.107
Local 169.254.160.224 to Remote 169.254.74.5
Local 169.254.206.17 to Remote 169.254.124.178
Local 169.254.206.17 to Remote 169.254.212.103
Local 169.254.206.17 to Remote 169.254.64.107
Local 169.254.206.17 to Remote 169.254.74.5
Local 169.254.233.247 to Remote 169.254.124.178
Local 169.254.233.247 to Remote 169.254.212.103
Local 169.254.233.247 to Remote 169.254.64.107
Local 169.254.233.247 to Remote 169.254.74.5
Local 169.254.56.214 to Remote 169.254.124.178
Local 169.254.56.214 to Remote 169.254.212.103
Local 169.254.56.214 to Remote 169.254.64.107
Local 169.254.56.214 to Remote 169.254.74.5
Larger than PMTU communication succeeds on 16 path(s)
RPC status:
4 paths up, 0 paths down (tcp check)
4 paths up, 0 paths down (udp check)
B1560-38A-R1R2-FAS::cluster*> cluster ping-cluster -node B1560-38A-R1R2-FAS-01
Host is B1560-38A-R1R2-FAS-01
Getting addresses from network interface table...
Cluster B1560-38A-R1R2-FAS-01_clus1 169.254.64.107 B1560-38A-R1R2-FAS-01 e0a
Cluster B1560-38A-R1R2-FAS-01_clus2 169.254.74.5 B1560-38A-R1R2-FAS-01 e0b
Cluster B1560-38A-R1R2-FAS-01_clus3 169.254.124.178 B1560-38A-R1R2-FAS-01 e0c
Cluster B1560-38A-R1R2-FAS-01_clus4 169.254.212.103 B1560-38A-R1R2-FAS-01 e0d
Cluster B1560-38A-R1R2-FAS-02_clus1 169.254.56.214 B1560-38A-R1R2-FAS-02 e0a
Cluster B1560-38A-R1R2-FAS-02_clus2 169.254.206.17 B1560-38A-R1R2-FAS-02 e0b
Cluster B1560-38A-R1R2-FAS-02_clus3 169.254.160.224 B1560-38A-R1R2-FAS-02 e0c
Cluster B1560-38A-R1R2-FAS-02_clus4 169.254.233.247 B1560-38A-R1R2-FAS-02 e0d
Local = 169.254.64.107 169.254.74.5 169.254.124.178 169.254.212.103
Remote = 169.254.56.214 169.254.206.17 169.254.160.224 169.254.233.247
Cluster Vserver Id = 4294967293
Ping status:
................
Basic connectivity succeeds on 16 path(s)
Basic connectivity fails on 0 path(s)
................................................................
Detected 9000 byte MTU on 16 path(s):
Local 169.254.124.178 to Remote 169.254.160.224
Local 169.254.124.178 to Remote 169.254.206.17
Local 169.254.124.178 to Remote 169.254.233.247
Local 169.254.124.178 to Remote 169.254.56.214
Local 169.254.212.103 to Remote 169.254.160.224
Local 169.254.212.103 to Remote 169.254.206.17
Local 169.254.212.103 to Remote 169.254.233.247
Local 169.254.212.103 to Remote 169.254.56.214
Local 169.254.64.107 to Remote 169.254.160.224
Local 169.254.64.107 to Remote 169.254.206.17
Local 169.254.64.107 to Remote 169.254.233.247
Local 169.254.64.107 to Remote 169.254.56.214
Local 169.254.74.5 to Remote 169.254.160.224
Local 169.254.74.5 to Remote 169.254.206.17
Local 169.254.74.5 to Remote 169.254.233.247
Local 169.254.74.5 to Remote 169.254.56.214
Larger than PMTU communication succeeds on 16 path(s)
RPC status:
4 paths up, 0 paths down (tcp check)
4 paths up, 0 paths down (udp check)
B1560-38A-R1R2-FAS::cluster*> up
B1560-38A-R1R2-FAS::*> network interface show
Logical Status Network Current Current Is
Vserver Interface Admin/Oper Address/Mask Node Port Home
----------- ---------- ---------- ------------------ ------------- ------- ----
B1560-38A-R1R2-FAS
B1560-38A-R1R2-FAS-01_mgmt1
up/up 10.2.21.101/24 B1560-38A-R1R2-FAS-01
e0M true
B1560-38A-R1R2-FAS-02_mgmt1
up/up 10.2.21.103/24 B1560-38A-R1R2-FAS-02
e0M true
cluster_mgmt up/up 10.2.21.100/24 B1560-38A-R1R2-FAS-01
e0M true
Cluster
B1560-38A-R1R2-FAS-01_clus1
up/up 169.254.64.107/16 B1560-38A-R1R2-FAS-01
e0a true
B1560-38A-R1R2-FAS-01_clus2
up/up 169.254.74.5/16 B1560-38A-R1R2-FAS-01
e0b true
B1560-38A-R1R2-FAS-01_clus3
up/up 169.254.124.178/16 B1560-38A-R1R2-FAS-01
e0c true
B1560-38A-R1R2-FAS-01_clus4
up/up 169.254.212.103/16 B1560-38A-R1R2-FAS-01
e0d true
B1560-38A-R1R2-FAS-02_clus1
up/up 169.254.56.214/16 B1560-38A-R1R2-FAS-02
e0a true
B1560-38A-R1R2-FAS-02_clus2
up/up 169.254.206.17/16 B1560-38A-R1R2-FAS-02
e0b true
B1560-38A-R1R2-FAS-02_clus3
up/up 169.254.160.224/16 B1560-38A-R1R2-FAS-02
e0c true
B1560-38A-R1R2-FAS-02_clus4
up/up 169.254.233.247/16 B1560-38A-R1R2-FAS-02
e0d true
jrtc_svm_iscsi
iscsi_1 up/up 10.2.3.1/25 B1560-38A-R1R2-FAS-01
a0a true
iscsi_2 up/up 10.2.4.1/25 B1560-38A-R1R2-FAS-02
a0a true
jrtc_svm_shares
share_1_2003 up/up 10.2.2.9/24 B1560-38A-R1R2-FAS-02
a0b-2003
false
shares_1_2003
up/up 10.2.2.7/24 B1560-38A-R1R2-FAS-01
a0b-2003
true
shares_2_2003
up/up 10.2.2.8/24 B1560-38A-R1R2-FAS-02
a0b-2003
true
shares_3_2004
up/up 10.2.16.2/22 B1560-38A-R1R2-FAS-01
a0b-2004
true
shares_4_2004
up/up 10.2.16.3/22 B1560-38A-R1R2-FAS-02
a0b-2004
true
Press <space> to page down, <return> for next line, or 'q' to quit...
18 entries were displayed.
B1560-38A-R1R2-FAS::*>
application autobalance cluster event
exit history job lun
man metrocluster network protection-type
qos redo rows run
san security set snaplock
snapmirror statistics statistics-v1 storage
storage-service system top up
volume vserver
B1560-38A-R1R2-FAS::*> network port
B1560-38A-R1R2-FAS::network port*> show
Node: B1560-38A-R1R2-FAS-01
Ignore
Speed(Mbps) Health Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status Status
--------- ------------ ---------------- ---- ---- ----------- -------- ------
a0a Default iSCSI up 1500 auto/- healthy false
a0b Default - up 1500 auto/- healthy false
a0b-2003 Default VLAN2003 up 1500 auto/- healthy false
a0b-2004 Default VLAN2004 up 1500 auto/- healthy false
e0M Default Default up 1500 auto/1000 healthy false
e0a Cluster Cluster up 9000 auto/10000 healthy false
e0b Cluster Cluster up 9000 auto/10000 healthy false
e0c Cluster Cluster up 9000 auto/10000 healthy false
e0d Cluster Cluster up 9000 auto/10000 healthy false
e0e Default - up 1500 auto/10000 healthy false
e0f Default - down 1500 auto/- - false
e0g Default - down 1500 auto/- - false
e0h Default - down 1500 auto/- - false
e0i Default - up 1500 auto/1000 healthy false
e0j Default - down 1500 auto/- - false
e0k Default - up 1500 auto/1000 healthy false
e0l Default - down 1500 auto/- - false
e3a Default - down 1500 auto/- - false
e3b Default - up 1500 auto/10000 healthy false
e4a Default - down 1500 auto/- - false
e4b Default - down 1500 auto/- - false
Node: B1560-38A-R1R2-FAS-02
Ignore
Speed(Mbps) Health Health
Port IPspace Broadcast Domain Link MTU Admin/Oper Status Status
--------- ------------ ---------------- ---- ---- ----------- -------- ------
a0a Default iSCSI up 1500 auto/- healthy false
a0b Default - up 1500 auto/- healthy false
a0b-2003 Default VLAN2003 up 1500 auto/- healthy false
a0b-2004 Default VLAN2004 up 1500 auto/- healthy false
e0M Default Default up 1500 auto/1000 healthy false
e0a Cluster Cluster up 9000 auto/10000 healthy false
e0b Cluster Cluster up 9000 auto/10000 healthy false
e0c Cluster Cluster up 9000 auto/10000 healthy false
e0d Cluster Cluster up 9000 auto/10000 healthy false
e0e Default - up 1500 auto/10000 healthy false
e0f Default - down 1500 auto/- - false
e0g Default - down 1500 auto/- - false
e0h Default - down 1500 auto/- - false
e0i Default - up 1500 auto/1000 healthy false
e0j Default - down 1500 auto/- - false
e0k Default - up 1500 auto/1000 healthy false
e0l Default - down 1500 auto/- - false
e3a Default - down 1500 auto/- - false
e3b Default - up 1500 auto/10000 healthy false
e4a Default - down 1500 auto/- - false
e4b Default - down 1500 auto/- - false
42 entries were displayed.
****** Sorry for formatting, attached text document**********
Im not sure why .17 is the only one it is sending the ping to and why it is directed out to the network if it can ping it with a test.
Any help is appreciated, this doesnt seem to be a huge issue but it is clogging up our logs.
Thanks