PowerFlex 4.x：无法部署 PowerFlex 存储群集。错误“引导操作失败”

PowerFlex 4.x：无法部署 PowerFlex 存储群集。错误“引导操作失败”

MDM 群集尚未形成。SVM 上仅安装 MDM rpm。

exception.log 有以下错误：-

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10156:in `configure_security_bootstrap'
/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10405:in `configure_scaleio_gateway'
/opt/asm-deployer/lib/asm/service_deployment.rb:4156:in `process_scaleio'

scaleio-block-legacy-gateway_exception.log 有以下错误：-

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

SVM 上的 LIA 跟踪日志每隔几秒钟就会填充以下内容。

2024/12/13 15:34:12.925210 LOW:7ff568389db0:netPath_StartAsServer_CK:00539:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:0 Start connection from IP XX.XX.XX.XX:43739 to XX.XX.XX.YY:9098
2024/12/13 15:34:12.925220 LOW:7ff568389db0:netPath_StartAsServer_CK:00552:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 Registered with manager
2024/12/13 15:34:12.925735 LOW:7ff568389db0:netSec_Accept_CK:00310: Starting secure accept
2024/12/13 15:34:12.929886 MED:7ff568389db0:mosSecurity_PrintLibX509StoreCtxError:01115: SSL certificate verification error: unable to get local issuer certificate
2024/12/13 15:34:12.929900 LOW:7ff568389db0:mosSsl_HandleError:00429: ERROR: Handshake: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed, SSL error: 1
2024/12/13 15:34:12.929903 LOW:7ff568389db0:netSec_SslHandshake_CK:00486: ERROR: Handshake failed (CERT_VERIFY_FAILURE)
2024/12/13 15:34:12.929905 LOW:7ff568389db0:netPath_StartAsServer_CK:00568: ERROR:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 secure accept failure (CERT_VERIFY_FAILURE)

在具有 SVM 的 IP 地址的 MVM 上运行以下命令，以验证 LIA 的端口 9099 已打开

echo ""> /dev/tcp/XX.XX.XX.XX/9099 && echo "Port is open" || echo "not open"

但是，PowerFlex 存储 MDM 群集的部署失败

客户的硬件防火墙阻止了端口 9099。 

与客户一起验证，在部署期间，他们没有使用任何可能在端口 9099 上阻止 LIA 通信的硬件防火墙。