VMs in an overlay segment experiencing TCP checksum incorrect when using bnxtnet driver

Products

• VMware NSX

Issue/Introduction

• Problematic VMs are in the same overlay segment
• Ping works fine while ssh is not working and other TCP related protocols do not
• Packet capture shows VMs have received TCP packets with incorrect checksum

Environment

VMware NSX-T Data Center

VMware NSX

Cause

For bnxtnet firmware 223 onwards, additional checks were added for VXLAN and GENEVE tunnel management.

An issue was uncovered due to the addition of these stringent checks, which is addressed in firmware version 226 onwards.

Resolution

Upgrade to firmware 226.x or downgrade to firmware 222.x

 

Workaround:

Disable GENEVE offload and reboot ESXi host:

esxcli system module parameters set -m bnxtnet -p "enable_geneve_ofld=0"

Script Settings

Minutes to Remind:
Hours to Remind:
Auto Refresh Interval (seconds):
Auto Refresh:
Auto Check-In:
Check-In Time:
Check-Out Time:
Template File:
Save

Open Trumbowyg

▶