PowerFlex 4.x: PowerFlexストレージ クラスターを導入できません。エラー「Failed Bootstrap operation failed」

PowerFlex 4.x: PowerFlexストレージ クラスターを導入できません。エラー「Failed Bootstrap operation failed」

MDMクラスターがまだ形成されていません。MDM rpmのみがSVMにインストールされます。

exception.logには次のエラーがあります。

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10156:in `configure_security_bootstrap'
/opt/asm-deployer/lib/asm/provider/elementmanager/scaleio.rb:10405:in `configure_scaleio_gateway'
/opt/asm-deployer/lib/asm/service_deployment.rb:4156:in `process_scaleio'

scaleio-block-legacy-gateway_exception.logには次のエラーがあります。

#<ASM::UserException: VXFM307::Bootstrap operation failed for operations: Bootstrap operation failed for operations: [{"name"=>".AddCaCommand",
      "message"=>"Command failed: Could not connect to XX.XX.XX.XX. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.YY. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}, {"name"=>".AddCaCommand", "message"=>"Command failed: Could not connect to XX.XX.XX.ZZ. Ensure that the relevant service (LIA) is running and that the server can communicate with the node"}].>

SVM上のLIAトレース ログには、数秒ごとに次のログが記録されます。

2024/12/13 15:34:12.925210 LOW:7ff568389db0:netPath_StartAsServer_CK:00539:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:0 Start connection from IP XX.XX.XX.XX:43739 to XX.XX.XX.YY:9098
2024/12/13 15:34:12.925220 LOW:7ff568389db0:netPath_StartAsServer_CK:00552:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 Registered with manager
2024/12/13 15:34:12.925735 LOW:7ff568389db0:netSec_Accept_CK:00310: Starting secure accept
2024/12/13 15:34:12.929886 MED:7ff568389db0:mosSecurity_PrintLibX509StoreCtxError:01115: SSL certificate verification error: unable to get local issuer certificate
2024/12/13 15:34:12.929900 LOW:7ff568389db0:mosSsl_HandleError:00429: ERROR: Handshake: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed, SSL error: 1
2024/12/13 15:34:12.929903 LOW:7ff568389db0:netSec_SslHandshake_CK:00486: ERROR: Handshake failed (CERT_VERIFY_FAILURE)
2024/12/13 15:34:12.929905 LOW:7ff568389db0:netPath_StartAsServer_CK:00568: ERROR:  :: Disconnected Live SERVER path 0x7ff5683c8480 of portal (nil) net 0x8fb000 socket 14 inflights 0 HS:1 secure accept failure (CERT_VERIFY_FAILURE)

SVMのIPアドレスを使用してMVMで次のコマンドを実行し、LIAのポート9099が開いていることを検証しました

echo ""> /dev/tcp/XX.XX.XX.XX/9099 && echo "Port is open" || echo "not open"

しかし、PowerFlex Storage MDM Clusterの導入に失敗しました

お客様のハードウェア ファイアウォールがポート9099をブロックしていました。 

導入中にポート9099でLIA通信をブロックしている可能性のあるハードウェア ファイアウォールを使用していないことをお客様に確認します。