cpeer.psk events

12/07/2023 Contributors

cpeer.psk.cluster.revoked

Severity: ERROR
Description: This message occurs when the system receives an authentication request for a remote cluster whose peer authentication has been revoked by the local cluster administrator. It might indicate that this system is under attack.
Corrective Action: ONTAP® software automatically closes the connection from which this incorrect authentication information was received. If this message is repeatedly generated from the same internet address, it might indicate that this system is under attack.
Syslog Message: ONTAP received a TLS request to authenticate with the pre-shared key of remote cluster %s, but the relationship with the remote cluster has been revoked by the administrator of this cluster. The request was sent from address %s in IPspace %s.
Parameters: clustername (STRING): Name of the remote cluster being probed.
sourceIP (STRING): IP address that is the source of the probe.
sourceIPspace (STRING): IPspace in which the probe arrived.

Severity: ERROR
Description: This message occurs when the system receives an authentication request for a remote cluster whose peer relationship is unauthenticated. It might indicate that this system is under attack. The request was sent from address %s in IPspace %s.
Corrective Action: ONTAP® software automatically closes the connection from which this incorrect authentication information was received. If this message is repeatedly generated from the same internet address, it might indicate that this system is under attack.
Syslog Message: ONTAP received a TLS request to authenticate with a cluster's pre-shared key, but there is no authenticated relationship with this remote cluster. Instead, the relationship is unauthenticated and has no keying information associated with it.
Parameters: clustername (STRING): Name of the remote cluster being probed.
sourceIP (STRING): IP address that is the source of the probe.
sourceIPspace (STRING): IPspace in which the probe arrived.

Severity: NOTICE
Description: This message occurs when the system is unable to find a suitable pre-shared key (PSK) cipher suite required for cluster peering. This is likely because the PSK cipher suites are disabled in the ONTAP security configuration. Cluster peering connections and associated applications may fail as a result.
Corrective Action: View the enabled cipher suites with the "security config show" command. Enable the PSK cipher suites with the "security config modify" command.
Syslog Message: The system was unable to find a suitable pre-shared key (PSK) cipher suite required for cluster peering. This is likely because the PSK cipher suites are disabled in the ONTAP security configuration. Cluster peering connections and associated applications may fail as a result.
Parameters: (None).

Severity: ERROR
Description: This message occurs when the system receives an authentication request from an unknown cluster. It might indicate that this system is under attack.
Corrective Action: ONTAP® software automatically closes the connection from which this incorrect authentication information was received. If this message is repeatedly generated from the same internet address, it might indicate that this system is under attack.
Syslog Message: ONTAP received a TLS request to authenticate with a remote cluster's pre-shared key, but the remote cluster UUID (%s) is unrecognized. The probe arrived from address %s in IPspace %s.
Parameters: clusterUUID (STRING): Cluster UUID being probed.
sourceIP (STRING): IP address that is the source of the probe.
sourceIPspace (STRING): IPspace in which the probe arrived.