VMs in an overlay segment experiencing TCP checksum incorrect when using bnxtnet driver
search cancel

VMs in an overlay segment experiencing TCP checksum incorrect when using bnxtnet driver

book

Article ID: 312454

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • Problematic VMs are in the same overlay segment
  • Ping works fine while ssh is not working and other TCP related protocols do not
  • Packet capture shows VMs have received TCP packets with incorrect checksum

Environment

VMware NSX-T Data Center
VMware NSX

Cause

For bnxtnet firmware 223 onwards, additional checks were added for VXLAN and GENEVE tunnel management.
An issue was uncovered due to the addition of these stringent checks, which is addressed in firmware version 226 onwards.

Resolution

Upgrade to firmware 226.x or downgrade to firmware 222.x
 
Workaround:

Disable GENEVE offload and reboot ESXi host:

esxcli system module parameters set -m bnxtnet -p "enable_geneve_ofld=0"